{"uuid": "e0cfa514-7108-4c63-9fa9-cf03dfa8f416", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107321", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117415121116197004", "content": "CVE-2026-107321 W3 Total Cache < 2.10.6 - Author+ Path Traversal via CDN Media Library Import The W3 Total Cache WordPress plugin before 2.10.6 does not confine a media-import file copy to the document root, nor enforce an effective file-type restriction on it, allowing users with the Author role or higher to plant content that, once an administrator runs the import, copies an arbitrary server-readable file into a publicly served directory, exposing it to unauthenticated retrieval.\nhttps://www.cve.org/CVERecord?id=CVE-2026-107321https://wpscan.com/vulnerability/b549d615-f06e-494f-9a71-da3152aacec9/#CVE_2026_107321#bot", "creation_timestamp": "2026-10-10T06:09:26.384318Z"}