Back Broadcom

CVE-2025-9501 - W3 Total Cache WordPress plugin vulnerability

Broadcom • December 10, 2025

If successfully exploited the flaw might allow an unauthenticated attacker to execute arbitrary PHP commands on the vulnerable server by submitting a ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerability in W3 Total Cache Plugin for WordPress Discovered A vulnerability identified as CVE-2025-9501 in the W3 Total Cache WordPress plugin could allow unauthenticated attackers to execute arbitrary PHP commands on affected servers. This flaw poses a significant risk to WordPress sites utilizing this plugin, potentially leading to severe security breaches. Users are advised to monitor for updates and apply patches as they become available. 1 sources 53

Extracted Entities

CVE-2025-9501 - W3 Total Cache WordPress plugin vulnerability

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Platforms (1)