Filtered by vendor Wordpress Subscriptions
Filtered by product W3 Total Cache Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-9501 1 Wordpress 2 W3 Total Cache, Wordpress 2025-11-17 N/A
The W3 Total Cache WordPress plugin before 2.8.13 is vulnerable to command injection via the _parse_dynamic_mfunc function, allowing unauthenticated users to execute PHP commands by submitting a comment with a malicious payload to a post.