01 Record

CVE-2026-18109

W3 Total Cache <= 2.10.3 - Unauthenticated Stored Cross-Site Scripting via Comment Author Name

HighPUBLISHEDCNA: Wordfence

Base score7.2 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

02 Description

W3 Total Cache <= 2.10.3 - Unauthenticated Stored Cross-Site Scripting via Comment Author Name

Published: 2026-08-14 02:25Z16 HR AGO
Last updated: 2026-08-14 10:45Z7 HR AGO
Reserved: 2026-07-28
Assigning CNA: Wordfence
Record state: PUBLISHED
Severity: High (CVSS 7.2)
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Weaknesses: CWE-79
SSVC decision: ExploitationnoneAutomatableyesTechnical Impactpartial
Data version: 5.2
Document digest: f9fef02bf4e8c241837cc23c7ab296bd0ad2af2671f872c79119814f240a87d3

VendorProductVersionsPlatforms

boldgridW3 Total Cache0 to 2.10.3—