w3 Total Cache vulnerabilities

Latest w3 Total Cache CVEs

Newest publication first

1. CVE-2012-6079 W3 Total Cache <= 0.9.2.4 - Sensitive Information Exposure

   Published 2019-11-22

   High·CVSS 7.5 EPSS 2.1%

   W3 Total Cache before 0.9.2.5 exposes sensitive cached database information which allows remote attackers to download this information via their hash keys.

2. CVE-2012-6078 W3 Total Cache <= 0.9.2.4 - Insecure Cryptography to Sensitive Information Disclosure

   Published 2019-11-22

   High·CVSS 7.5 EPSS 2.3%

   W3 Total Cache before 0.9.2.5 generates hash keys insecurely which allows remote attackers to predict the values of the hashes.

3. CVE-2012-6077 W3 Total Cache <= 0.9.2.4 - Password Hash Extraction

   Published 2019-11-22

   High·CVSS 7.5 EPSS 2.1%

   W3 Total Cache before 0.9.2.5 allows remote attackers to retrieve password hash information due to insecure storage of database cache files.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.