Vendor

W3 EDGE

1 brief RSS

Stored XSS in W3 Total Cache Plugin for WordPress

The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) via the LazyLoad Background Mutator, allowing unauthenticated attackers to execute arbitrary scripts after moderator approval.

W3 Total Cache web-security xss wordpress cve-2026-78438

1t 1c 2h ago