CVE · Critical

CVE-2026-57623 — W3 Total Cache [w3-total-cache] < 2.10.0

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-57623 W3 Total Cache [w3-total-cache] < 2.10.0 Improper Validation of Specified Quantity in Input Critical 9.0 < 2.10.0 2.10.0 2026-06-29

CVE-2026-57623

A critical vulnerability has been discovered in the W3 Total Cache plugin for WordPress, affecting all versions from 1.0 through 2.9.4. The flaw allows malicious individuals without login credentials to inject and run arbitrary commands on the hosting server.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.