High
CVE-2026-87920
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 38
Reset filters
Medium
CVE-2026-78471
Autoptimize <= 3.1.15.1 - Unauthenticated Stored Cross-Site Scripting via Comment Author Name
High
CVE-2026-78438
W3 Total Cache <= 2.10.5 - Unauthenticated Stored Cross-Site Scripting via LazyLoad Background Mutator
High
CVE-2026-18051
W3 Total Cache < 2.10.5 - Unauthenticated Path Traversal
High
CVE-2026-18109
W3 Total Cache <= 2.10.3 - Unauthenticated Stored Cross-Site Scripting via Comment Author Name
Medium
CVE-2026-66695
W3 Total Cache <= 2.10.2 - Unauthenticated Path Traversal
High
CVE-2026-9282
W3 Total Cache <= 2.9.4 - Unauthenticated Arbitrary File Read via 'f_array[]' Parameter
High
CVE-2026-57623
W3 Total Cache <= 2.9.4 - Unauthenticated Arbitrary Code Execution
High
CVE-2026-5032
W3 Total Cache <= 2.9.3 - Unauthenticated Security Token Exposure via User-Agent Header
Medium
CVE-2026-39595
W3 Total Cache <= 2.9.1 - Missing Authorization
Critical
CVE-2026-27384
W3 Total Cache <= 2.9.1 - Unauthenticated Arbitrary Code Execution
High
CVE-2025-9501
W3 Total Cache <= 2.8.12 - Unauthenticated Command Injection
High
CVE-2024-12365
W3 Total Cache <= 2.8.1 - Authenticated (Subscriber+) Missing Authorization to Server-Side Request Forgery
Medium
CVE-2024-12008
W3 Total Cache <= 2.8.1 Information Exposure via Log Files
Medium
CVE-2024-12006
W3 Total Cache <= 2.8.1 Missing Authorization to Unauthenticated Plugin Deactivation and Extensions Activation/Deactivation
Low
CVE-2023-5359
W3 Total Cache <= 2.7.5 - Sensitive Credentials Stored in Plaintext
High
CVE-2022-31090
Guzzle <= 6.5.7 and 7.0-7.4.4 - Information Exposure
High
CVE-2021-24452
W3 Total Cache <= 2.1.4 - Reflected Cross-Site Scripting via extension
Medium
CVE-2021-24436
W3 Total Cache <= 2.1.3 - Reflected Cross-Site Scripting via extension
Medium
CVE-2021-24427
W3 Total Cache <= 2.1.2 Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2019-6715
W3 Total Cache 0.9.2.6-0.9.3 - File Read / Directory Traversal
High
CVE-2012-6078
W3 Total Cache <= 0.9.2.4 - Insecure Cryptography to Sensitive Information Disclosure
High
CVE-2012-6079
W3 Total Cache <= 0.9.2.4 - Sensitive Information Exposure
High
CVE-2012-6077
W3 Total Cache <= 0.9.2.4 - Password Hash Extraction
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.