Approved changes feed: RSS · Atom

cpe:2.3:a:automattic:wp_super_cache:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAutomattic (1dc39c9b-4ddb-5af6-acf4-410b436129a9)
ProductWp Super Cache (581df3b7-a4a5-546e-9d49-314594169fc9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/automattic/wp-super-cache purl2cpe 2026-06-01 10:14:42.642952

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-24312 vulnerable 2026-06-03 14:43:56.794642 WP Super Cache < 1.7.3 - Authenticated Remote Code Execution
The parameters $cache_path, $wp_cache_debug_ip, $wp_super_cache_front_page_text, $cache_scheduled_time, $cached_direct_pages used in the settings of WP Super Cache WordPress plugin before 1.7.3 result in RCE because they allow input of '$' and '\n'. This is due to an incomplete fix of CVE-2021-24209.
Published: 2021-06-01T11:33:30.000Z
Updated: 2024-08-03T19:28:23.442Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.