New WordPress Vulnerability W3 Total Cache CVE-2025

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

W3 Total Cache Vulnerability Affects 1 Million WordPress Sites A command injection vulnerability in the W3 Total Cache plugin has exposed approximately 1 million WordPress sites to remote code execution (RCE) attacks. The vulnerability allows attackers to execute arbitrary code on affected sites, posing significant risks to website security. Site administrators are urged to take immediate action to mitigate the threat. 12 sources 61