WordPress Plugin Vulnerabilities

W3 Total Cache 0.9.4 - Edge Mode Enabling CSRF

Description

The W3 Total Cache WordPress plugin was affected by an Edge Mode Enabling CSRF security vulnerability.

Affects Plugins

Plugin icon
w3-total-cache
Fixed in 0.9.4.1

References

URL
https://seclists.org/fulldisclosure/2014/Sep/29

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352

Miscellaneous

Submitter
pvdl
Verified
No
WPVDB ID
b6817692-4f97-4f8c-907c-7e7c8492d43a

Timeline

Publicly Published
2014-09-28 (about 11 years ago)
Added
2014-09-28 (about 11 years ago)
Last Updated
2026-04-13 (about 1 month ago)

Other

Published
Title
Published
2025-01-24
Title
Popup Box < 3.2.5 - Cross-Site Request Forgery
Published
2019-11-05
Title
Tidio Live Chat < 4.2.0 - CSRF to Stored XSS
Published
2023-01-27
Title
Booking calendar, Appointment Booking System < 3.2.4 - Form Creation/Update/Deletion/Duplication via CSRF
Published
2022-06-27
Title
Jquery Validation For Contact Form 7 < 5.3 - Arbitrary Options Update via CSRF
Published
2025-09-10
Title
Admin in English with Switch <= 1.1 - Cross-Site Request Forgery