BoldGrid W3 Total Cache Plugin Arbitrary Code Execution Vulnerability

Vulnerability

A vulnerability allowing arbitrary code execution has been identified in the BoldGrid W3 Total Cache plugin for WordPress, specifically in versions through 2.9.1. This issue arises from improper validation of input quantities, which allows access to functionalities not properly restricted by access control lists (ACLs).

Impact

Exploitation of this vulnerability could enable a malicious actor to execute arbitrary code remotely on the affected WordPress site.

Added: Mar 5, 2026, 7:11 AM
Updated: Mar 5, 2026, 7:11 AM

Vulnerability Rating

Custom Algorithm
spread
7.6
impact
10.0
exploitability
7.6
remediation
0.0
relevance
3.5
threat
0.0
urgency
2.9
incentive
4.2

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.