CVE-2026-9282 | boldgrid W3 Total Cache Plugin up to 2.9.4 on WordPress Minify setupSources f_array[] path traversal

A vulnerability has been found in boldgrid W3 Total Cache Plugin up to 2.9.4 on WordPress and classified as problematic. This vulnerability affects the function setupSources of the component Minify. The manipulation of the argument f_array[] leads to path traversal.

This vulnerability is referenced as CVE-2026-9282. Remote exploitation of the attack is possible. No exploit is available.