CVE-2025-9501 - Vulnerability Details

Threat entity extracted from intelligence sources

Frequency
8
occurrences
First Seen
November 18, 2025
Last Seen
December 10, 2025

CVE-2025-9501 is a vulnerability tracked by ThreatCluster, appearing in 4 threat clusters built from 8 intelligence report mentions.

CVE-2025-9501 is a vulnerability tracked across 4 threat clusters and 8 intelligence report mentions on ThreatCluster. First observed November 18, 2025; most recent activity December 10, 2025.

Related Threat Clusters

Recent Intelligence Reports

  • CVE-2025-9501 - W3 Total Cache WordPress plugin vulnerability — Broadcom · December 10, 2025
  • PoC released for W3 Total Cache Vulnerability that Exposes 1+ Million Websites to RCE Attacks — Cybersecuritynews · November 24, 2025
  • PoC Published for W3 Total Cache Flaw Exposing 1M+ Sites to RCE — Gbhackers · November 24, 2025
  • Cache of Doom: WordPress Plugin Flaw Exposes Millions to Cyber Havoc — Webpronews · November 21, 2025
  • New WordPress Vulnerability W3 Total Cache CVE-2025 — Rswebsols · November 20, 2025
  • W3 Total Cache WordPress plugin vulnerable to PHP command injection — Bleepingcomputer · November 19, 2025
  • W3 Total Cache WordPress plugin vulnerable to PHP command injection — Bleepingcomputer · November 19, 2025
  • W3 Total Cache Vulnerability Puts Over One Million WordPress Sites at Risk — Thecyberexpress · November 18, 2025

Related Entities

Command Injection Data Breach Malware Ransomware Zero-day Exploit T1059 - Command and Scripting Interpreter Elementor Elementor Pro GutenKit Hunk Companion PHP Really Simple Security

Frequently asked questions

What is CVE-2025-9501?

CVE-2025-9501 is a vulnerability tracked by ThreatCluster, appearing in 4 threat clusters built from 8 intelligence report mentions.

Is CVE-2025-9501 still active?

The most recent intelligence report mentioning CVE-2025-9501 on ThreatCluster is dated December 10, 2025. Activity was first observed November 18, 2025, giving a tracked span from then to December 10, 2025.

What is CVE-2025-9501 associated with?

Across ThreatCluster reporting, CVE-2025-9501 most frequently co-occurs with Command Injection, Data Breach, Malware, Ransomware, Zero-day Exploit, among 12 tracked related entities.

What are the latest developments involving CVE-2025-9501?

The most significant recent cluster is “W3 Total Cache Vulnerability Affects 1 Million WordPress Sites” (12 articles · Updated November 18, 2025). CVE-2025-9501 appears across 4 threat clusters in total, listed above with sources.

How much reporting does ThreatCluster have on CVE-2025-9501?

CVE-2025-9501 appears in 8 intelligence report mentions across 4 deduplicated threat clusters, aggregated from 17,000+ monitored sources.

CVSS v3.1 Breakdown