> W3 Total Cache WordPress plugin vulnerable to PHP command injection
[AUTHOR: Bill Toulas]
[DATE: 19/11/2025 17:34]
[LANGUAGE: EN]
A critical flaw in the W3 Total Cache (W3TC) WordPress plugin can be exploited to run PHP commands on the server by posting a comment that contains a malicious payload. [...]