https://wpscan.com/vulnerability/dc56cdd2-419b-4a64-9d2a-29dc7e79cb6d/
https://nvd.nist.gov/vuln/detail/cve-2026-18051
https://patchon.jp/blog/w3-total-cache-path-traversal
2.9.4 に 2.10.5 の修正をバックポート
https://wordpress.org/support/topic/backport-of-the-page-cache-fix-to-the-2-9-x-branch/
curl -O https://github.com/BoldGrid/w3-total-cache/commit/04d09f6c97932cd6a2b3a7b04c31bab58276aefd.patch sed -e 's/\$w3tc_config/\$config/g' -e 's/\$w3tc_group/\$group/g' -e 's/\$w3tc_key/\$key/g' -e 's/\$w3tc_value/\$value/g' 04d09f6c97932cd6a2b3a7b04c31bab58276aefd.patch > 04d09f6c97932cd6a2b3a7b04c31bab58276aefd.patch-2.9.4 patch -p1 --ignore-whitespace < 04d09f6c97932cd6a2b3a7b04c31bab58276aefd.patch-2.9.4 patching file Cache_File_Generic.php Hunk #3 succeeded at 275 (offset -2 lines). Hunk #4 succeeded at 341 with fuzz 2 (offset -2 lines). Hunk #5 succeeded at 449 (offset -2 lines). Hunk #6 succeeded at 499 (offset -2 lines). Hunk #7 succeeded at 516 (offset -2 lines). patching file PgCache_ContentGrabber.php
