W3 Total Cache Command Injection Vulnerability Exposes 1 Million WordPress Sites to RCE Attacks

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

W3 Total Cache Vulnerability Affects 1 Million WordPress Sites A command injection vulnerability in the W3 Total Cache plugin has exposed approximately 1 million WordPress sites to remote code execution (RCE) attacks. The vulnerability allows attackers to execute arbitrary code on affected sites, posing significant risks to website security. Site administrators are urged to take immediate action to mitigate the threat. 12 sources 61