WordPress plugin
W3 Total Cache security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 41 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical2
- High22
- Medium15
- Low2
All W3 Total Cache vulnerabilities
Nothing in this view
No vulnerabilities match this filter. Show all.
W3 Total Cache: common questions
Does W3 Total Cache have known vulnerabilities?
Yes. VulnCrest Radar lists 41 known vulnerabilities in W3 Total Cache: 2 critical, 22 high, 15 medium, 2 low. None are known to affect version null.
How do I check which version of W3 Total Cache I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent W3 Total Cache vulnerability?
CVE-2026-120019, published Oct 30, 2026: W3 Total Cache <= 2.10.7 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Predictable Minify Placeholder. Severity: Medium (CVSS 5.4).
Is any W3 Total Cache vulnerability listed in CISA KEV?
No. None of the known W3 Total Cache vulnerabilities is currently listed in the CISA KEV catalog.