CVE-2021-24427: fallo en BoldGrid W3 Total Cache
W3 Total Cache < 2.1.3 - Authenticated Stored XSS
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
3Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackepss 0.6%
The W3 Total Cache WordPress plugin before 2.1.3 did not sanitise or escape some of its CDN settings, allowing high privilege users to use JavaScript in them, which will be output in the page, leading to an authenticated Stored Cross-Site Scripting issue
Productos afectados
BoldGrid · W3 Total CacheCVEs relacionadas — BoldGrid W3 Total Cache
En el mismo producto, de las más peligrosas a las menos.
CVE-2021-24452—W3 Total Cache < 2.1.5 - Reflected XSS in Extensions Page (JS Context)EPSS 1.9%CVE-2021-24436—W3 Total Cache < 2.1.4 - Reflected XSS in Extensions Page (Attribute Context)EPSS 1.8%CVE-2026-57623CRITICALWordPress W3 Total Cache plugin <= 2.9.4 - Arbitrary Code Execution vulnerabilityEPSS 0.5%CVE-2026-66695MEDIUMWordPress W3 Total Cache plugin <= 2.10.2 - Path Traversal vulnerabilityEPSS 0.4%CVE-2026-27384CRITICALWordPress W3 Total Cache plugin <= 2.9.1 - Arbitrary Code Execution vulnerabilityEPSS 0.4%CVE-2026-39595MEDIUMWordPress W3 Total Cache plugin <= 2.9.1 - Broken Access Control vulnerabilityEPSS 0.2%