← All Tags
# vulnerability → php-injection

1 link tagged with all of: vulnerability + php-injection

Click any tag below to further narrow down your results

+ w3-total-cache (1) + wordpress (1) + security (1)

Links

W3 Total Cache WordPress plugin vulnerable to PHP command injection

A critical vulnerability in the W3 Total Cache WordPress plugin allows attackers to execute PHP commands on affected servers by submitting malicious comments. The flaw, tracked as CVE-2025-9501, impacts all versions before 2.8.13, and users are urged to update immediately to avoid exploitation.
Saved by tldr-importer · Last saved February 14, 2026 · 1 min read
+ w3-total-cache vulnerability ✓ + wordpress + security php-injection ✓