WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
w3-total-cache
Published
2025-01-13
Title
W3 Total Cache < 2.8.2 - Unauthenticated Plugin Deactivation and Extensions Activation/Deactivation
Slug
w3-total-cache
Published
2025-10-27
Title
W3 Total Cache < 2.8.13 - Unauthenticated Command Injection
Slug
w3-total-cache
Published
2026-02-24
Title
W3 Total Cache < 2.9.2 - Unauthenticated Arbitrary Code Execution
Slug
w3-total-cache
Published
2026-04-01
Title
W3 Total Cache < 2.9.4 - Unauthenticated Security Token Exposure via User-Agent Header
Slug
w3-total-cache
Published
2026-06-29
Title
W3 Total Cache < 2.10.0 - Unauthenticated Arbitrary Code Execution
Slug
w3-total-cache
Published
2026-07-10
Title
W3 Total Cache < 2.10.0 - Unauthenticated Arbitrary File Read via f_array[] Parameter
Slug
w3-total-cache
Published
2026-03-12
Title
W3 Total Cache < 2.9.2 - Author+ Missing Authorization
Slug
w3-total-cache
Published
2026-07-31
Title
W3 Total Cache < 2.10.3 - Unauthenticated Path Traversal
Slug
w3-total-cache
Published
2026-08-13
Title
W3 Total Cache < 2.10.4 - Unauthenticated Stored XSS via Comment Author Name
Slug
w3-total-cache
Published
2026-08-17
Title
W3 Total Cache < 2.10.5 - Unauthenticated Arbitrary Directory File Write and .htaccess Overwrite via Path Traversal in the Page Cache Key
Slug
w3-total-cache
Published
2026-09-04
Title
W3 Total Cache < 2.10.6 - Unauthenticated Stored XSS via LazyLoad Background Mutator
Slug
w3s-cf7-zoho
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
w3s-cf7-zoho
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
w3s-cf7-zoho
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
w3s-cf7-zoho
Published
2025-09-26
Title
W3SCloud Contact Form 7 to Zoho CRM <= 3.0 - Cross-Site Request Forgery
Slug
w3sc-elementor-to-zoho
Published
2026-07-17
Title
W3SC Elementor to Zoho CRM <= 2.2.0 - Cross-Site Request Forgery to Settings Update
Slug
w3speedster-wp
Published
2024-01-31
Title
W3SPEEDSTER < 7.20 - Settings Update via CSRF
Slug
w3speedster-wp
Published
2024-10-29
Title
W3SPEEDSTER < 7.27 - Admin+ RCE
Slug
w3speedster-wp
Published
2024-11-11
Title
W3SPEEDSTER < 7.27 - Cross-Site Request Forgery
Slug
w3speedster-wp
Published
2025-01-16
Title
W3SPEEDSTER <= 7.33 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
w3swoozoho
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
w4-post-list
Published
2023-03-22
Title
W4 Post List < 2.4.6 - Reflected XSS
Slug
w4-post-list
Published
2023-03-22
Title
W4 Post List < 2.4.6 - Subscriber+ Password Protected Post Content Disclosure
Slug
w4-post-list
Published
2023-03-22
Title
W4 Post List < 2.4.6 - Contributor+ Stored XSS
Slug
w4-post-list
Published
2023-03-08
Title
W4 Post List < 2.4.5 - Contributor+ Stored XSS