The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The WP Super Cache WordPress plugin before 1.7.2 was affected by an authenticated (admin+) RCE in the settings page due to input validation failure and weak $cache_path check in the WP Super Cache Settings -> Cache Location option. Direct access to the wp-cache-config.php file is not prohibited, so this vulnerability can be exploited for a web shell injection.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Wp Super Cache Plugin | — | Update wp-super-cache plugin to version 1.7.2, or a newer patched version | May 15, 2025 | Mar 16, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub