W3 Total Cache Plugin Arbitrary PHP Execution

The vulnerability of the parsedynamicmfunc function in the W3 Total Cache plugin of the WordPress content management system is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary PHP commands...

CVE-2025-9501

The W3 Total Cache WordPress plugin before 2.8.13 is vulnerable to command injection via the parsedynamicmfunc function, allowing unauthenticated users to execute PHP commands by submitting a comment with a malicious payload to a post...

CVE-2025-9501

The W3 Total Cache WordPress plugin, in versions prior to 2.8.13 , contains a command injection vulnerability within the _parse_dynamic_mfunc function. This flaw allows unauthenticated users to execute arbitrary PHP commands by submitting a comment containing a malicious payload to a post. The vu...

CVE-2025-9501 W3 Total Cache < 2.8.13 - Unauthenticated Command Injection

The W3 Total Cache WordPress plugin before 2.8.13 is vulnerable to command injection via the parsedynamicmfunc function, allowing unauthenticated users to execute PHP commands by submitting a comment with a malicious payload to a post...

PT-2025-47123

Name of the Vulnerable Software and Affected Versions W3 Total Cache versions prior to 2.8.13 Description The W3 Total Cache WordPress plugin is affected by a command injection issue through the parse dynamic mfunc function. This allows unauthenticated users to execute arbitrary PHP commands by...