Threats tagged 'ghsa-qwxj-263x-rfqj'

CVE-2026-66695 is a medium severity unauthenticated path traversal vulnerability affecting BoldGrid's W3 Total Cache plugin versions up to and including 2.10.2. The flaw allows an attacker to perform path traversal using sequences like '.../...//', potentially leading to limited integrity and availability impacts. No official patch or remediation guidance has been provided yet, and no known exploits are reported in the wild.