W3 Total Cache Security Vulnerabilities and Issues — W3 Total Cache CVE List

Lucene search

BoldgridW3 Total Cache

2 matches found

CVE•added 2021/07/12 8:15 p.m.•108 views

CVE-2021-24427

The W3 Total Cache WordPress plugin before 2.1.3 did not sanitise or escape some of its CDN settings, allowing high privilege users to use JavaScript in them, which will be output in the page, leading to an authenticated Stored Cross-Site Scripting issue

4.8CVSS4.7AI score0.00287EPSS

CVE•added 2014/12/19 3:59 p.m.•52 views

CVE-2014-8724

Cross-site scripting (XSS) vulnerability in the W3 Total Cache plugin before 0.9.4.1 for WordPress, when debug mode is enabled, allows remote attackers to inject arbitrary web script or HTML via the "Cache key" in the HTML-Comments, as demonstrated by the PATH_INFO to the default URI.

4.3CVSS5.7AI score0.00499EPSS