PULSE
EN
FEED
ransomdeadlock reclama a Hensel Elektrik · DE · Manufacturingransomrhysida reclama a Sanders Law Group · Professional Servicesransomqilin reclama a Miljaus Producciones S.L (www.miljaus.com) · ES · Otherransomqilin reclama a von Schaewen · DE · Otherransomn0n reclama a Company #110 · ES · Not Foundransomchaos reclama a mickeybody.com · US · Retail & E-Commerceransomaurora reclama a ARX Group SA · CH · Otherransomwhitearmor reclama a whitearmor.cc · Technologyransomlockbit5 reclama a dorsiacademy.it · IT · Educationransomlockbit5 reclama a mlh.com.lb · LB · Professional Servicesransomlockbit5 reclama a lidoway.com · LI · Not Foundransomlockbit5 reclama a zelsior.es · ES · Not Foundransomemperador reclama a JS Constructor, INC · US · Manufacturingransomwhitearmor reclama a Whirlpool · US · Manufacturingransomdeadlock reclama a Hensel Elektrik · DE · Manufacturingransomrhysida reclama a Sanders Law Group · Professional Servicesransomqilin reclama a Miljaus Producciones S.L (www.miljaus.com) · ES · Otherransomqilin reclama a von Schaewen · DE · Otherransomn0n reclama a Company #110 · ES · Not Foundransomchaos reclama a mickeybody.com · US · Retail & E-Commerceransomaurora reclama a ARX Group SA · CH · Otherransomwhitearmor reclama a whitearmor.cc · Technologyransomlockbit5 reclama a dorsiacademy.it · IT · Educationransomlockbit5 reclama a mlh.com.lb · LB · Professional Servicesransomlockbit5 reclama a lidoway.com · LI · Not Foundransomlockbit5 reclama a zelsior.es · ES · Not Foundransomemperador reclama a JS Constructor, INC · US · Manufacturingransomwhitearmor reclama a Whirlpool · US · Manufacturing
← Todos los CVEs
CVE Watch19 oct 2026

CVE-2025-9501

The W3 Total Cache WordPress plugin before 2.8.13 is vulnerable to command injection via the _parse_dynamic_mfunc function, allowing unauthe

CVSS

9.0

Crítico

EPSS

22.1%

p98

KEV

—

Exploit Today

29

0-100

Publicado: 17 nov 2025 · Última mod.: 19 oct 2026

EPSS · 30d
20.5%EPSS · 30 días22.6%
2026-09-252026-10-23
Descripción técnica

The W3 Total Cache WordPress plugin before 2.8.13 is vulnerable to command injection via the _parse_dynamic_mfunc function, allowing unauthenticated users to execute PHP commands by submitting a comment with a malicious payload to a post.

Referencias oficiales
CVEs relacionados

Sin CVEs relacionados por CWE o producto.