Lucene search
+L

326 matches found

Vulnrichment
Vulnrichment
•added 2026/03/05 5:53 a.m.•11 views

CVE-2026-27384 WordPress W3 Total Cache plugin <= 2.9.1 - Arbitrary Code Execution vulnerability

Improper Validation of Specified Quantity in Input vulnerability in BoldGrid W3 Total Cache w3-total-cache allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects W3 Total Cache: from n/a through = 2.9.1...

9CVSS5.9AI score0.00448EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2026/03/05 5:53 a.m.•59 views

CVE-2026-27384 WordPress W3 Total Cache plugin <= 2.9.1 - Arbitrary Code Execution vulnerability

Improper Validation of Specified Quantity in Input vulnerability in BoldGrid W3 Total Cache w3-total-cache allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects W3 Total Cache: from n/a through = 2.9.1...

9CVSS0.00448EPSS
SaveExploits1References1
CVE
CVE
•added 2026/03/05 5:53 a.m.•100 views

CVE-2026-27384

CVE-2026-27384 affects BoldGrid W3 Total Cache (WordPress plugin) up to version 2.9.1. The vulnerability arises from improper validation of a specified quantity in input, allowing access to functionality not properly constrained by ACLs, which can enable unauthenticated Arbitrary Code Execution (...

9CVSS5.9AI score0.00448EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/03/05 12:00 a.m.•27 views

PT-2026-23258

Name of the Vulnerable Software and Affected Versions BoldGrid W3 Total Cache versions through 2.9.1 Description The software contains an improper validation of specified quantity in input, potentially allowing access to functionality not properly constrained by access control lists ACLs...

9CVSS5.8AI score0.00448EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2026/03/05 12:00 a.m.•26 views

WordPress plugin W3 Total Cache has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application plugin. There is a...

9CVSS5.8AI score0.00448EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/05 12:00 a.m.•8 views

CVE-2026-27384: Improper Validation of Specified Quantity in Input

Improper Validation of Specified Quantity in Input vulnerability in BoldGrid W3 Total Cache w3-total-cache allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects W3 Total Cache: from n/a through = 2.9.1...

9CVSS5.8AI score0.00448EPSS
SaveExploits1References1
Patchstack
Patchstack
•added 2026/02/24 6:24 a.m.•25 views

WordPress W3 Total Cache plugin <= 2.9.1 - Arbitrary Code Execution vulnerability

Arbitrary Code Execution vulnerability discovered by CODE WHITE GmbH in WordPress Plugin W3 Total Cache versions = 2.9.1...

9CVSS5.5AI score0.00448EPSS
SaveExploits1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/12/09 12:00 a.m.•19 views

W3 Total Cache Plugin Arbitrary PHP Execution

The vulnerability of the parsedynamicmfunc function in the W3 Total Cache plugin of the WordPress content management system is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary PHP commands...

9CVSS7.9AI score0.22106EPSS
SaveExploits1References2Affected Software1
NVD
NVD
•added 2025/11/17 6:15 a.m.•34 views

CVE-2025-9501

The W3 Total Cache WordPress plugin before 2.8.13 is vulnerable to command injection via the parsedynamicmfunc function, allowing unauthenticated users to execute PHP commands by submitting a comment with a malicious payload to a post...

9CVSS0.22106EPSS
SaveExploits1References1
CVE
CVE
•added 2025/11/17 6:00 a.m.•73 views

CVE-2025-9501

The W3 Total Cache WordPress plugin, in versions prior to 2.8.13 , contains a command injection vulnerability within the _parse_dynamic_mfunc function. This flaw allows unauthenticated users to execute arbitrary PHP commands by submitting a comment containing a malicious payload to a post. The vu...

9CVSS8.4AI score0.22106EPSS
SaveIn wildExploits1References1
Vulnrichment
Vulnrichment
•added 2025/11/17 6:00 a.m.•11 views

CVE-2025-9501 W3 Total Cache < 2.8.13 - Unauthenticated Command Injection

The W3 Total Cache WordPress plugin before 2.8.13 is vulnerable to command injection via the parsedynamicmfunc function, allowing unauthenticated users to execute PHP commands by submitting a comment with a malicious payload to a post...

8.3AI score0.22106EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/17 12:00 a.m.•7 views

CVE-2025-9501: Undefined Security Weakness

The W3 Total Cache WordPress plugin before 2.8.13 is vulnerable to command injection via the parsedynamicmfunc function, allowing unauthenticated users to execute PHP commands by submitting a comment with a malicious payload to a post...

9CVSS8.3AI score0.22106EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/11/17 12:00 a.m.•21 views

WordPress plugin W3 Total Cache has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

9CVSS7.5AI score0.22106EPSS
SaveExploits1References2
GithubExploit
GithubExploit
•added 2025/11/07 8:31 p.m.•278 views

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Boldgrid W3_Total_Cache

CVE-2023-5359 - W3 Total Cache Cleartext Storage Vulnerability...

7.5CVSS6.5AI score0.00813EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2025/10/27 12:00 a.m.•31 views

PT-2025-47123

Name of the Vulnerable Software and Affected Versions W3 Total Cache versions prior to 2.8.13 Description The W3 Total Cache WordPress plugin is affected by a command injection issue through the parse dynamic mfunc function. This allows unauthenticated users to execute arbitrary PHP commands by...

9CVSS8AI score0.22106EPSS
SaveExploits1References55
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•41 views

EUVD-2012-5952

Malware in sbrugna...

7.5CVSS7.3AI score0.02318EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2012-5953

Malware in sbrugna...

7.5CVSS7.3AI score0.02134EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2014-9235

Malware in sbrugna...

6.8CVSS5.8AI score0.01357EPSS
SaveExploits1References9
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•29 views

EUVD-2021-11364

Malware in sbrugna...

6.1CVSS6.3AI score0.01917EPSS
SaveExploits2References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2021-11348

Malware in sbrugna...

6.1CVSS6.3AI score0.01905EPSS
SaveExploits2References2
Rows per page
Query Builder