CVE-2026-87920 | BoldGrid W3 Total Cache Plugin up to 2.10.6 on WordPress Output-Buffer Regex Rewrite mutate_url cross site scripting

October 2, 2026 Yanac

A vulnerability marked as problematic has been reported in BoldGrid W3 Total Cache Plugin up to 2.10.6 on WordPress. This affects the function mutate_url of the component Output-Buffer Regex Rewrite. Performing a manipulation results in cross site scripting.

This vulnerability is known as CVE-2026-87920. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More