CVE-2026-107321 | W3 Total Cache Plugin up to 2.10.5 on WordPress Media Import path traversal

October 10, 2026 Yanac

A vulnerability was found in W3 Total Cache Plugin up to 2.10.5 on WordPress and classified as problematic. Affected by this issue is some unknown functionality of the component Media Import. Executing a manipulation can lead to path traversal.

This vulnerability appears as CVE-2026-107321. The attack may be performed from remote. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More