Is Wp Super Cache safe?

Plugin details

• Slug: wp-super-cache
• Requires PHP: 7.4+
• Max supported PHP (analyzed): 8.4

Known vulnerabilities

• WP Super Cache [wp-super-cache] < 1.7.3 [CVE-2021-24329, WordPress WP Super Cache plugin <= 1.7.2 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability, WP Super Cache <= 1.7.2 - Authenticated (Admin+) Stored Cross-Site Scripting, WP Super Cache &lt; 1.7.3 - Authenticated Stored Cross-Site Scripting (XSS)]
• WP Super Cache [wp-super-cache] < 1.7.3 [CVE-2021-24312, WP Super Cache <= 1.7.2 - Authenticated Remote Code Execution, WP Super Cache &lt; 1.7.3 - Authenticated Remote Code Execution]
• WP Super Cache [wp-super-cache] < 1.7.2 [CVE-2021-24209, WordPress WP Super Cache plugin <= 1.7.1 - Authenticated Remote Code Execution (RCE) vulnerability, WP Super Cache <= 1.7.1 - Authenticated (Admin+) Remote Code Execution, WP Super Cache &lt; 1.7.2 - Authenticated Remote Code Execution (RCE)]
• WP Super Cache [wp-super-cache] < 1.3.2 [CVE-2013-2009, WP Super Cache <= 1.2 - Remote Code Execution, WP-Super-Cache 1.3 - Remote Code Execution]
• WP Super Cache [wp-super-cache] < 1.3.1 [CVE-2013-2008, WordPress Super Cache Plugin <= 1.3 - XSS, WP Super Cache Plugin <= 1.3 - Multiple Cross-Site Scripting, WP Super Cache 1.3 - trunk/plugins/awaitingmoderation.php URI XSS, WP Super Cache 1.3 - trunk/plugins/badbehaviour.php URI XSS, WP Super Cache 1.3 - trunk/plugins/domain-mapping.php URI XSS, WP Super Cache 1.3 - trunk/plugins/searchengine.php URI XSS, WP Super Cache 1.3 - trunk/plugins/wptouch.php URI XSS, WP Super Cache 1.3 - trunk/wp-cache.php wp_nonce_url Function URI XSS]

+ 17 more known vulnerabilities

• WP Super Cache [wp-super-cache] < 1.3.2 [CVE-2013-2011, WP Super Cache < 1.3.2 - Remote Code Execution]
• WP Super Cache [wp-super-cache] < 1.4.5 [WordPress Super Cache Plugin <= 1.4.4 - Cross Site Scripting]
• WP Super Cache [wp-super-cache] < 1.4.5 [WordPress Super Cache Plugin <= 1.4.4 - PHP Object Injection]
• WP Super Cache [wp-super-cache] < 1.4.3 [WordPress Super Cache Plugin <= 1.4.2 - Stored Cross Site Scripting]
• WP Super Cache [wp-super-cache] < 1.3.1 [WordPress Super Cache Plugin <= 1.3 - Remote Code Execution]
• WP Super Cache [wp-super-cache] < 1.3 [WordPress WP Super Cache Plugin - Remote PHP Code Execution]
• WP Super Cache [wp-super-cache] < 1.9 [WordPress WP Super Cache plugin <= 1.8 - Cache Poisoning vulnerability]
• WP Super Cache [wp-super-cache] < 1.9 [WP Super Cache <= 1.8 - Unauthenticated Cache Poisoning]
• WP Super Cache [wp-super-cache] < 1.4.9 [WP Super Cache <= 1.4.8 - Cross-Site Scripting]
• WP Super Cache [wp-super-cache] < 1.4.5 [WP Super Cache <= 1.4.4 - Directory Listing]
• WP Super Cache [wp-super-cache] < 1.4.5 [WP Super Cache <= 1.4.4 - Authenticated File Deletion]
• WP Super Cache [wp-super-cache] < 1.4.5 [WP Super Cache <= 1.4.4 - PHP Object Injection]
• WP Super Cache [wp-super-cache] < 1.4.3 [WP Super Cache < 1.4.3 - Cross Site Scripting]
• WP Super Cache [wp-super-cache] < 1.9 [WP Super Cache &lt; 1.9 - Unauthenticated Cache Poisoning]
• WP Super Cache [wp-super-cache] < 1.4.9 [WP Super Cache &lt; 1.4.9 - Cross-Site Scripting (XSS)]
• WP Super Cache [wp-super-cache] < 1.4.5 [WP Super Cache &lt; 1.4.5 - PHP Object Injection]
• WP Super Cache [wp-super-cache] < 1.4.3 [WP Super Cache &lt; 1.4.3 - Stored Cross-Site Scripting (XSS)]

Vulnerabilities are matched against the exact installed version when it's known. Always keep the plugin updated to the latest release.

Safer / more established alternatives

• LiteSpeed Cache — 7000000+ active installs — max PHP 8.4
• WP Fastest Cache – WordPress Cache Plugin — 1000000+ active installs — max PHP 8.4
• WP-Optimize – Cache, Compress images, Minify & Clean database to boost page speed & performance — 1000000+ active installs — max PHP <8.0
• Speed Optimizer – The All-In-One Performance-Boosting Plugin — 1000000+ active installs — max PHP 8.4
• W3 Total Cache — 900000+ active installs