Login Request a demo
WT
Product
W3 Total Cache
by boldgrid · last CVE Oct 2, 2026
23
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Vulnerabilities23In the news0Timeline
Severity mix
Critical 3High 12Medium 6Low 0
Severity
All severities23Critical3High12Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add W3 Total Cache to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-66695
6.5
0%
Aug 6
WordPress W3 Total Cache plugin <= 2.10.2 - Path Traversal vulnerability
Affected: through 2.10.2
CVE-2021-24452
6.1
2%
Jul 19
The W3 Total Cache WordPress plugin before 2.1.5 was affected by a reflected Cross-Site Scripting (XSS) issue within the "extension" parameter in the Extensions dashboard, when…
Affected: before 2.1.5
CVE-2021-24436
6.1
2%
Jul 19
The W3 Total Cache WordPress plugin before 2.1.4 was vulnerable to a reflected Cross-Site Scripting (XSS) security vulnerability within the "extension" parameter in the Extensions…
Affected: before 2.1.4
CVE-2024-12006
5.3
1%
Jan 14
W3 Total Cache <= 2.8.1 Missing Authorization to Unauthenticated Plugin Deactivation and Extensions Activation/Deactivation
Affected: through 2.8.1
CVE-2021-24427
4.8
1%
Jul 12
The W3 Total Cache WordPress plugin before 2.1.3 did not sanitise or escape some of its CDN settings, allowing high privilege users to use JavaScript in them, which will be output…
Affected: before 2.1.3
CVE-2026-39595
4.7
0%
Jun 17
WordPress W3 Total Cache plugin <= 2.9.1 - Broken Access Control vulnerability
Affected: through 2.9.1
Showing 6