Verified

CVE-2026-107321: W3 Total Cache 0 to before 2.10.6

Affected technology

W3 Total Cache · 0 to before 2.10.6
Vendor not specified by the source

Description’s affected range: before 2.10.6 does not confine a media-import file copy to the document root

Component: Not specified by the source

The source does not specify what an attacker can achieve.

Published 2026-10-10 06:17:39.022449+00:00

GitHub Advisory Database · Source record · observed 2026-10-10 07:23:45.480922+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-10 06:17:36.054866+00:00 UTC