CVE-2026-120019

The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 2.10.7 . The flaw arises from insufficient input sanitization and output escaping of the 'comment' parameter. For successful exploitation, an unauthenticated attacker must ha...