PLUGIN SECURITY
Is W3 Total Cache safe?
Known vulnerabilities, PHP compatibility and safer alternatives for the W3 Total Cache WordPress plugin — checked against WP Clinic's local security database.
Plugin details
- Slug:
w3-total-cache
Known vulnerabilities
- CVE-2021-24452 — W3 Total Cache [w3-total-cache] < 2.1.5 (XSS) · Medium
- CVE-2021-24436 — W3 Total Cache [w3-total-cache] < 2.1.4 (XSS) · Medium
- CVE-2021-24427 — W3 Total Cache [w3-total-cache] < 2.1.3 (XSS) · Medium
- CVE-2013-2010 — W3 Total Cache [w3-total-cache] < 0.9.2.9 (CWE-74) · Critical
- CVE-2019-6715 — W3 Total Cache [w3-total-cache] < 0.9.4 · High
+ 47 more known vulnerabilities
- CVE-2014-9414 — W3 Total Cache [w3-total-cache] < 0.9.4.1 (CSRF)
- CVE-2014-8724 — W3 Total Cache [w3-total-cache] < 0.9.4.1 (XSS)
- W3 Total Cache [w3-total-cache] < 0.9.7.4
- W3 Total Cache [w3-total-cache] < 0.9.5
- W3 Total Cache [w3-total-cache] < 0.9.5
- W3 Total Cache [w3-total-cache] < 0.9.5
- W3 Total Cache [w3-total-cache] < 0.9.5
- W3 Total Cache [w3-total-cache] < 0.9.5
- W3 Total Cache [w3-total-cache] < 0.9.4.1
- W3 Total Cache [w3-total-cache] < 0.9.2.9
- W3 Total Cache [w3-total-cache] < 0.9.7.4
- W3 Total Cache [w3-total-cache] < 0.9.7.4
- W3 Total Cache [w3-total-cache] < 0.9.7.4
- W3 Total Cache [w3-total-cache] < 0.9.5
- W3 Total Cache [w3-total-cache] < 0.9.5
- W3 Total Cache [w3-total-cache] < 0.9.5
- W3 Total Cache [w3-total-cache] < 0.9.5
- W3 Total Cache [w3-total-cache] < 0.9.5
- W3 Total Cache [w3-total-cache] < 0.9.5
- W3 Total Cache [w3-total-cache] < 0.9.5
- W3 Total Cache [w3-total-cache] < 0.9.5
- W3 Total Cache [w3-total-cache] < 0.9.4.1
- CVE-2012-6078 — W3 Total Cache [w3-total-cache] < 0.9.2.5 (CWE-200) · High
- CVE-2022-31090 — W3 Total Cache [w3-total-cache] < 2.2.3 (CWE-200) · High
- CVE-2012-6077 — W3 Total Cache [w3-total-cache] < 0.9.2.5 (CWE-200) · High
- CVE-2012-6079 — W3 Total Cache [w3-total-cache] < 0.9.2.5 (CWE-200) · High
- W3 Total Cache [w3-total-cache] < 0.9.7.4
- W3 Total Cache [w3-total-cache] < 0.9.7.4
- W3 Total Cache [w3-total-cache] < 0.9.7.4
- W3 Total Cache [w3-total-cache] < 0.9.5
- W3 Total Cache [w3-total-cache] < 0.9.5
- W3 Total Cache [w3-total-cache] < 0.9.5
- W3 Total Cache [w3-total-cache] < 0.9.5
- W3 Total Cache [w3-total-cache] < 0.9.5
- W3 Total Cache [w3-total-cache] < 0.9.5
- W3 Total Cache [w3-total-cache] < 0.9.5
- W3 Total Cache [w3-total-cache] < 0.9.4.1
- CVE-2023-5359 — W3 Total Cache [w3-total-cache] < 2.7.6 (CWE-200) · High
- CVE-2024-12008 — W3 Total Cache [w3-total-cache] < 2.8.2 (CWE-200) · Medium
- CVE-2024-12006 — W3 Total Cache [w3-total-cache] < 2.8.2 (Missing Authorization) · Medium
- CVE-2024-12365 — W3 Total Cache [w3-total-cache] < 2.8.2 (Missing Authorization) · High
- CVE-2026-27384 — W3 Total Cache [w3-total-cache] < 2.9.2 (CWE-1284) · Critical
- CVE-2026-5032 — W3 Total Cache [w3-total-cache] < 2.9.4
- W3 Total Cache [w3-total-cache] < 2.8.13
- CVE-2026-39595 — W3 Total Cache [w3-total-cache] < 2.9.2 (Missing Authorization) · Medium
- CVE-2026-57623 — W3 Total Cache [w3-total-cache] < 2.10.0 (CWE-1284) · Critical
- CVE-2026-9282 — W3 Total Cache [w3-total-cache] < 2.10.0 (Path Traversal) · High
Vulnerabilities are matched against the exact installed version when it's known. Always keep the plugin updated to the latest release.
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.