WP Super Cache is a full page caching plugin for WordPress. It creates static pages that are served quickly by the web server.
Over the weekend there was a flurry of excitement as not one, but two releases of the plugin were made in quick succession. The second to fix a bug introduced in the first. I’m very sorry about that.
WP Super Cache 1.4.3 fixed a security bug in the cache file listing section of the plugin settings page. A carefully crafted query by a third party would cause an XSS in the file listing. While serious, the owner of the blog cannot be tricked into loading the file listing page by way of an image or public link as a nonce is required to load it. The attacker would have to ask the blog owner to visit the cache listing page manually. Thanks to Marc Montpas from Sucuri for reporting that.
WP Super Cache 1.4.4 fixed a bug introduced in the previous version where queries with GET parameters caused a fatal error. Thanks to webaware on the WordPress.org forums for reporting that and including a patch to fix it.
If you’re using an older version of WP Super Cache you’re encourage to upgrade to 1.4.4 as soon as you can.
2 thoughts on “WP Super Cache 1.4.4”