The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The parameters $cache_path, $wp_cache_debug_ip, $wp_super_cache_front_page_text, $cache_scheduled_time, $cached_direct_pages used in the settings of WP Super Cache WordPress plugin before 1.7.3 result in RCE because they allow input of '$' and '\n'. This is due to an incomplete fix of CVE-2021-24209.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Wp Super Cache Plugin | — | Update wp-super-cache plugin to version 1.7.3, or a newer patched version | May 15, 2025 | May 14, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub