WordPress wp-super-cache has 6 known advisories in the phpwarden feed. Feed 2026.10.29.1, updated 2026-10-28.
| CVE | Title | Severity | CVSS | Affected | Fixed in |
|---|---|---|---|---|---|
| CVE-2013-2010 | WordPress W3 Total Cache Plugin 0.9.2.8 has a Remote PHP Code Execution Vulnerability | critical | 9.8 | <=1.2 | – |
| CVE-2021-24209 | The WP Super Cache WordPress plugin before 1.7.2 was affected by an authenticated (admin+) RCE in the settings page due to input validation | high | 7.2 | <1.7.2 | 1.7.2 |
| CVE-2013-2009 | WordPress WP Super Cache Plugin 1.2 has Remote PHP Code Execution | high | 8.8 | =1.2 | – |
| CVE-2021-24329 | The WP Super Cache WordPress plugin before 1.7.3 did not properly sanitise its wp_cache_location parameter in its settings, which could lead | medium | 5.4 | <1.7.3 | 1.7.3 |
| CVE-2021-24312 | The parameters $cache_path, $wp_cache_debug_ip, $wp_super_cache_front_page_text, $cache_scheduled_time, $cached_direct_pages used in the set | high | 7.2 | <1.7.3 | 1.7.3 |
| CVE-2013-2008 | WordPress Super Cache Plugin 1.3 has XSS. | medium | 6.1 | =1.3 | – |
Find out in one command. phpwarden checks your WordPress install against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.
# one-time install pip install phpwarden # then phpwarden wordpress /var/www/html
Or keep it checked automatically with the GitHub Action or a nightly cron; see WordPress docs.
Install docs How findings are ranked