Threats tagged 'ghsa-wx46-pc78-pqhq'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.0	CVE-2025-9501The W3 Total Cache WordPress plugin before 2.8.13 is vulnerable to command injection via the _parse_dynamic_mfunc Critical9.02025-11-17GCVE DatabaseCVE-2025-9501 The W3 Total Cache WordPress plugin versions prior to 2.8.13 contain a command injection vulnerability in the _parse_dynamic_mfunc function. This flaw allows unauthenticated users to execute arbitrary PHP commands by submitting a specially crafted comment payload to a post. The vulnerability is rated critical with a CVSS score of 9.0. Report on CVE-2025-9501 Vulnerability #ghsa-wx46-pc78-pqhq	GCVE Database	2025-11-17

Page 1 of 1