Known vulnerabilities in W3 Total Cache

Software CPE: cpe:2.3:a:fredericktownes:w3-total-cache:*:*:*:*:*:wordpress:*:*
Total vulnerabilities: 10
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting W3 Total Cache W3 Total Cache is affected by 10 known vulnerabilities: 1 high, 7 medium, 2 low Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU103448 - Exposure of sensitive information to an unauthorized actor
CVE-2024-12008
CWE-200 Medium
No
No
2.8.2 30.01.2025 SB2025013019
#VU103447 - Incorrect Authorization
CVE-2024-12006
CWE-863 Medium
No
No
2.8.2 30.01.2025 SB2025013019
#VU103446 - Missing Authorization
CVE-2024-12365
CWE-862 Medium
No
No
2.8.2 30.01.2025 SB2025013019
#VU20664 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
0.9.5 02.09.2019 SB2016092104
#VU19781 - Cross-Site Request Forgery (CSRF)
CWE-352 Medium
No
No
0.9.5 02.08.2019 SB2016092609
#VU19782 - Unrestricted Upload of File with Dangerous Type
CWE-434 High
No
No
0.9.5 02.08.2019 SB2016092610
#VU18407 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Medium
No
No
0.9.7.4 07.05.2019 SB2019050701
#VU18406 - Server-Side Request Forgery (SSRF)
CWE-918 Medium
No
No
0.9.7.4 07.05.2019 SB2019050701
#VU18405 - Exposure of sensitive information to an unauthorized actor
CVE-2019-6715
CWE-200 Medium
Available
No
0.9.4 07.05.2019 SB2019040105
SB2014092001
#VU18404 - Improper input validation
CWE-20 Low
No
No
0.9.7.4 07.05.2019 SB2019050701