W3 Total Cache (W3TC) leaves WordPress websites vulnerable to compromise.  The vulnerability was discoved by researcher, Jason A. Donenfeld and reported on one of the seclists.org forums recently.