Unknown w3 Total Cache vulnerabilities

3 CVEs affecting Unknown w3 Total Cache, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-107321, published 2026-10-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-9501, published 2025-11-17. Critical severity, CVSS 9.0. EPSS: 22.6% chance of exploitation in the next 30 days. The W3 Total Cache WordPress plugin before 2.8.13 is vulnerable to command injection via the _parse_dynamic_mfunc function, allowing unauthenticated users to execute PHP commands by submitting a…
CVE-2026-18051, published 2026-08-19. Critical severity, CVSS 10.0. EPSS: 0.6% chance of exploitation in the next 30 days. The W3 Total Cache WordPress plugin before 2.10.5 does not properly validate the request path it uses to build cache file names, allowing unauthenticated attackers to write a file into any existing…
CVE-2026-107321, published 2026-10-10. Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days. The W3 Total Cache WordPress plugin before 2.10.6 does not confine a media-import file copy to the document root, nor enforce an effective file-type restriction on it, allowing users with the Author…