The popular WordPress plugin WP Super Cache has been found to have a cross-site scripting (XSS) vulnerability in versions prior to 1.4.4. On sites with outdated versions, it is possible for an attacker to take complete control of the WordPress site. Please note: this vulnerability only affects users which have installed WP Super Cache. However, if you are unsure if you use the plugin or not you should still take precautions to protect your site.
Thankfully, this is vulnerability is simple to address; version 1.4.4, available now, contains a patch.
Hopefully, you’re already well-versed in logging into your WordPress site as an administrator!
If there is an update for a plugin or a theme, then you’ll likely have a number in the top bar and next to Updates as shown below (the number 5). Click on
Check the boxes of the plugins you’d like to updated and click on
And at the end of the update process you should receive something similar to,
If you want to be absolutely sure your version is updated, you can click on
For further reading, the following links can be consulted:
Try a Free Cloud Server.
Trying a new server is a breeze, and it’ll be up and running in only a few minutes...
Tagged with: cross-site scripting • plugins • security • vulnerability • wordpress • WP Super Cache • xss