Yakezie.com - Topic: Update Your Caching Plugins

MoneyBeagle on Update Your Caching Plugins

Thu, 25 Apr 2013 04:17:37 +0000

I updated as soon as I saw one available, a couple of days back. Thanks for the warning. Will also run some scans.

. on Update Your Caching Plugins

Wed, 24 Apr 2013 23:16:26 +0000

Thanks for letting us know, just updated.

Khaleef @ KNS Financial on Update Your Caching Plugins

Wed, 24 Apr 2013 20:06:33 +0000

WP Super Cache just pushed through an update on my dashboard as well.

First Million is the Hardest on Update Your Caching Plugins

Wed, 24 Apr 2013 17:07:23 +0000

Edward Antrobus said:

When was this? Because W3 Total Cache was last updated 8 days ago, according to what I can find. While some security enhancements are listed, the changelog doesn't say anything about a major security hole

I just had an update pushed through for the plugin in the last few hours.

Edward Antrobus on Update Your Caching Plugins

Wed, 24 Apr 2013 13:28:11 +0000

When was this? Because W3 Total Cache was last updated 8 days ago, according to what I can find. While some security enhancements are listed, the changelog doesn't say anything about a major security hole

Eric - PersonalProfitability.com on Update Your Caching Plugins

Wed, 24 Apr 2013 12:37:20 +0000

Here's a reminder for why to always keep your plugins up to date (from Wordfence):

A security hole that allows anyone to execute any command on your WordPress server has been discovered in the WP Super Cache and W3 Total Cache plugins.

WHAT TO DO: Upgrade to the newest version of both these plugins immediately The security holes have been fixed by the developers.

The impact of these security holes can't be overstated. They allow anyone to bypass all security and gain complete access to your WordPress site.

The exploit was posted by a user on the WordPress forums. The plugin authors have now updated their code to fix this issue.

The security hole allows an attacker to post PHP code embedded in comments and that code will be executed by your server. This effectively gives them unlimited access to all parts of your site and database.

There have been roughly 6 million downloads of both plugins combined, so they are very popular and this hole is likely to have spawned large scale automated attacks that take advantage of it.

If you run either of these plugins, it's likely that your system may already have been compromised. Please upgrade both plugins and then run a full Wordfence scan to verify your system integrity.