What is the CVSS score of EUVD-2026-53902?

EUVD-2026-53902 has a CVSS 3.1 base score of 6.5 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L. EPSS exploitation probability: 0.3%.

W3 Total Cache EUVD-2026-53902

| CVE-2026-66695 MEDIUM

Path Traversal: '.../...//' (CWE-35)

2026-08-06 Patchstack

GHSA-qwxj-263x-rfqj

WordPress Path Traversal W3 Total Cache Wordpress Plugin Boldgrid

6.5

CVSS 3.1 · Vendor: Patchstack

Severity by source

Vendor (Patchstack) PRIMARY

6.5 MEDIUM

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

vuln.today AI

6.5 MEDIUM

Plugin is network-accessible with no auth required (AV:N/PR:N/UI:N); C:N reflects write-only traversal behavior; I:L and A:L reflect limited file manipulation impact within web server permissions.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N

Primary rating from Vendor (Patchstack).

CVSS VectorVendor: Patchstack

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

Low

Lifecycle Timeline

Analysis Generated

Aug 06, 2026 - 16:04 vuln.today

CVE Published

Aug 06, 2026 - 14:28 cve.org

MEDIUM 6.5

DescriptionCVE.org

Unauthenticated Path Traversal in W3 Total Cache <= 2.10.2 versions.

AnalysisAI

Path traversal in W3 Total Cache WordPress plugin (versions ≤ 2.10.2) enables remote unauthenticated attackers to manipulate files outside the intended cache directory without any credentials or user interaction. The CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms zero-barrier network exploitation; the C:N/I:L/A:L impact profile indicates this traversal affects file integrity and availability rather than exposing arbitrary file reads, suggesting a write- or delete-capable traversal rather than a classic information-disclosure variant. No public exploit code and no CISA KEV listing are identified at time of analysis.

Technical ContextAI

W3 Total Cache is a WordPress performance optimization plugin developed by BoldGrid (CPE: cpe:2.3:a:boldgrid:w3_total_cache:*:*:*:*:*:*:*:*) that implements page caching, object caching, database caching, and CDN integration via direct filesystem operations. CWE-35 (Path Traversal: '.../.../') identifies the root cause as insufficient sanitization of attacker-controlled input before it is used in file path construction - traversal sequences such as '../', '%2e%2e%2f', or double-encoded variants allow navigation above the intended cache directory root. The absence of confidentiality impact (C:N) distinguishes this from a typical read-based traversal; the I:L and A:L scores suggest the vulnerable code path performs write or delete operations on attacker-influenced paths, potentially overwriting WordPress core files, configuration, or plugin assets in accessible directories.

RemediationAI

Upgrade W3 Total Cache to the first release above version 2.10.2 - consult the Patchstack advisory at https://patchstack.com/database/wordpress/plugin/w3-total-cache/vulnerability/wordpress-w3-total-cache-plugin-2-10-2-path-traversal-vulnerability and the WordPress plugin repository changelog to identify the confirmed patched release, as no exact fix version is present in the current intelligence. If immediate upgrade is not feasible, temporarily deactivating the W3 Total Cache plugin eliminates the attack surface entirely; the trade-off is loss of caching performance benefits, which may increase server load on high-traffic sites. As a compensating control, a WAF rule blocking path traversal sequences (../, %2e%2e/, %252e%252e/, and slash-encoded variants) in HTTP request parameters targeting WordPress plugin endpoints can reduce exploitation likelihood, though WAF rules are bypassable via encoding variations and should not substitute for patching.