Create CVE-2026-5032.yaml

[VISHVAJITH-REDDY]

PR Information

• Added CVE-2026-5032 - W3 Total Cache <= 2.9.3 Unauthenticated Information Disclosure
• References: https://www.wordfence.com/threat-intel/vulnerabilities/id/a65eb62d-847b-4f3a-848b-1290e3118c01

Template validation

• Validated with a host running a vulnerable version and/or configuration (True Positive)
• Validated with a host running a patched version and/or configuration (avoid False Positive)

Additional Details

W3 Total Cache plugin for WordPress <= 2.9.3 exposes the W3TC_DYNAMIC_SECURITY
token when a request is sent with User-Agent: "W3 Total Cache". This bypasses
output buffering and leaks the token in page source to unauthenticated attackers
when fragment caching is enabled.

CVSS: 7.5 (High) | CWE-200 | Unauthenticated

Shodan query: http.component:"W3 Total Cache"

[neo-by-projectdiscovery-dev]

Neo - Nuclei Template Review

No security issues found

_{Comment @pdneo help for available commands. · Open in Neo}