Skip to content
Threat Feed

Product

W3 Total Cache < 2.9.2

1 brief RSS
critical advisory

CVE-2026-27384: W3 Total Cache Unauthenticated RCE via eval() Code Injection

A public exploit has been published for CVE-2026-27384, a critical unauthenticated remote code execution vulnerability in the W3 Total Cache WordPress plugin.

W3 Total Cache < 2.9.2 rce wordpress code-injection eval w3-total-cache
2r 1t