Tag

Cve-2026-87920

1 brief RSS

Stored Cross-Site Scripting in W3 Total Cache

The W3 Total Cache plugin for WordPress contains a Stored Cross-Site Scripting (XSS) vulnerability, CVE-2026-87920, allowing unauthenticated attackers to execute arbitrary web scripts via flawed Output-Buffer Regex rewriting.

W3 Total Cache xss web-application wordpress cve-2026-87920

2t 1c 1w ago