WordPress plugin
WP Super Cache security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 12 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High5
- Medium6
- Low0
All WP Super Cache vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.5 | Unauthenticated Cache Poisoning ≤1.8Update to 1.9 | — | |
| High7.2 | Authenticated Remote Code Execution <1.7.3Update to 1.7.3 | CVE-2021-24312 | |
| Medium4.8 | Authenticated (Admin+) Stored Cross-Site Scripting <1.7.3Update to 1.7.3 | CVE-2021-24329 | |
| High7.2 | Authenticated (Admin+) Remote Code Execution <1.7.2Update to 1.7.2 | CVE-2021-24209 | |
| Medium5.3 | Cross-Site Scripting ≤1.4.8Update to 1.4.9 | — | |
| Medium5.4 | Authenticated File Deletion <1.4.5Update to 1.4.5 | — | |
| Medium5.3 | Directory Listing <1.4.5Update to 1.4.5 | — | |
| High8.1 | PHP Object Injection <1.4.5Update to 1.4.5 | — | |
| High7.2 | Cross Site Scripting <1.4.3Update to 1.4.3 | — | |
| High8.8 | Remote Code Execution ≤1.2Update to 1.3 | CVE-2013-2009 | |
| Medium6.1 | Multiple Cross-Site Scripting ≤1.3Update to 1.3.1 | CVE-2013-2008 | |
| Critical9.8 | Remote Code Execution <1.3.2Update to 1.3.2 | CVE-2013-2011 |
- Medium6.5Unauthenticated Cache Poisoning
≤1.8Update to 1.9
- High7.2Authenticated Remote Code Execution
<1.7.3Update to 1.7.3
- Medium4.8Authenticated (Admin+) Stored Cross-Site Scripting
<1.7.3Update to 1.7.3
- High7.2Authenticated (Admin+) Remote Code Execution
<1.7.2Update to 1.7.2
- Medium5.3Cross-Site Scripting
≤1.4.8Update to 1.4.9
- Medium5.4Authenticated File Deletion
<1.4.5Update to 1.4.5
- Medium5.3Directory Listing
<1.4.5Update to 1.4.5
- High8.1PHP Object Injection
<1.4.5Update to 1.4.5
- High7.2Cross Site Scripting
<1.4.3Update to 1.4.3
- High8.8Remote Code Execution
≤1.2Update to 1.3
- Medium6.1Multiple Cross-Site Scripting
≤1.3Update to 1.3.1
- Critical9.8Remote Code Execution
<1.3.2Update to 1.3.2
WP Super Cache: common questions
Does WP Super Cache have known vulnerabilities?
Yes. VulnCrest Radar lists 12 known vulnerabilities in WP Super Cache: 1 critical, 5 high, 6 medium. None are known to affect version null.
How do I check which version of WP Super Cache I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent WP Super Cache vulnerability?
505edcf7-7015-453e-abd2-e2cd68a3a9f6, published Oct 3, 2022: WP Super Cache <= 1.8 - Unauthenticated Cache Poisoning. Severity: Medium (CVSS 6.5).
Is any WP Super Cache vulnerability listed in CISA KEV?
No. None of the known WP Super Cache vulnerabilities is currently listed in the CISA KEV catalog.