Description
WordPress Plugin WP Super Cache is prone to a cache poisoning vulnerability. Exploiting this issue may allow a remote attacker to place invalid entries into a cache, which are then assumed to be valid when later used. WordPress Plugin WP Super Cache version 1.8 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.9 or latest
References
https://sploitus.com/exploit?id=WPEX-ID:F9DDDB51-60FF-4FED-8C89-749D92C4AF94
https://github.com/Automattic/jetpack/blob/trunk/projects/plugins/super-cache/CHANGELOG.md#changelog
Related Vulnerabilities
MySQL CVE-2020-14539 Vulnerability (CVE-2020-14539)
WordPress Plugin WP eCommerce Multiple Vulnerabilities (3.8.9.5)
WordPress Plugin GorillaForms-Custom Contact Forms Unspecified Vulnerability (2.0.3)
XWiki CVE-2023-40573 Vulnerability (CVE-2023-40573)
Apache HTTP Server CVE-2018-11763 Vulnerability (CVE-2018-11763)