The W3 Total Cache plugin for WordPress is vulnerable to unauthenticated arbitrary file writes, potentially leading to full site compromise or server-wide impact.

The plugin fails to properly validate request paths when building cache file names, which is a classic path traversal (CWE-22) issue. This allows an unauthenticated attacker to inject malicious files into any directory, including critical configuration files like .htaccess on Apache servers.

With a CVSS score of 10.0, this vulnerability permits complete system takeover. An attacker could disable security hardening rules, inject malicious scripts, or overwrite critical system files, leading to total loss of control over the web application and the underlying server environment.

Immediate Action: Update the W3 Total Cache plugin to version 2.10.5 or higher immediately.

Proactive Monitoring: Review web server logs for suspicious file write attempts or modifications to critical configuration files such as .htaccess.

Compensating Controls: Implement a Web Application Firewall (WAF) with rules configured to block path traversal sequences, such as "../", to provide interim protection.

Public Exploit Available: Unknown

This is a critical, high-urgency vulnerability that requires immediate attention from all administrators using the W3 Total Cache plugin. Given the potential for complete site and server compromise, patching must be performed as the primary defense against potential exploitation.