Vendor
high
advisory
Bold Grid W3 Total Cache: Stored Cross-site Scripting (CVE-2026-114178)
2 TTPs 3 CVEsBold Grid W3 Total Cache versions from n/a through 2.10.7 contain an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability, which allows Stored XSS.
W3 Total Cache +1
wordpress
xss
web-application
cve-2026-111254
2t
3c
updated
high
advisory
Boldgrid W3 Total Cache Cleartext Credential Storage (CVE-2023-5359)
1 rule 1 TTP 1 CVECVE-2023-5359 is a cleartext credential storage vulnerability in W3 Total Cache versions 2.7.5 and earlier that allows unauthenticated remote attackers to retrieve API keys and OAuth secrets via direct HTTP requests to plugin PHP files.
W3 Total Cache
wordpress
vulnerability
credential-exposure
web-application
1r
1t
1c
high
advisory
Stored Cross-Site Scripting in W3 Total Cache
2 TTPs 1 CVEThe W3 Total Cache plugin for WordPress versions up to 2.10.3 is vulnerable to Stored Cross-Site Scripting when the Lazy Load Images feature is enabled, allowing unauthenticated attackers to inject malicious scripts via comment author names.
W3 Total Cache
2t
1c