EIP-2026-114181

This Metasploit module exploits an unauthenticated directory traversal vulnerability in the WordPress W3 Total Cache plugin (versions 0.9.2.6 to 0.9.3) to read arbitrary files with web server privileges. It sends a crafted JSON payload via a PUT request to trigger the vulnerability.