---
title: "Automattic WP Super Cache vulnerabilities and CVEs"
url: https://radicalnotion.ai/vendor/automattic/wp-super-cache
type: product
description: "Automattic WP Super Cache has 6 published CVEs, 0 in CISA KEV and 5 with public exploits."
updated: 2021-06-01
source: RadicalNotion.AI
license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/)
---

# Automattic WP Super Cache vulnerabilities

Vendor: [Automattic](https://radicalnotion.ai/vendor/automattic)

- **Published CVEs:** 6
- **In CISA KEV:** 0
- **With a public exploit:** 5
- **With a patch:** 6
- **Average CVSS:** 7.4
- **First CVE:** 2020-02-07
- **Latest CVE:** 2021-06-01

## Severity breakdown

| Severity | CVEs |
| --- | --- |
| Critical | 1 |
| High | 3 |
| Medium | 2 |
| Low | 0 |
| Unscored | 0 |

## Most common weakness types

| CWE | Name | CVEs |
| --- | --- | --- |
| [CWE-79](https://radicalnotion.ai/cwe/cwe-79) | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 2 |
| [CWE-94](https://radicalnotion.ai/cwe/cwe-94) | Improper Control of Generation of Code ('Code Injection') | 2 |
| [CWE-74](https://radicalnotion.ai/cwe/cwe-74) | Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') | 1 |

## CVEs by year

| Year | CVEs published |
| --- | --- |
| 2020 | 3 |
| 2021 | 3 |

## Affected versions

| Version | Kind | CVEs |
| --- | --- | --- |
| \< 1.7.3 | range | 2 |
| \< 1.7.2 | range | 1 |
| \<= 1.2 | range | 1 |
| 1.2 | range | 1 |
| 1.3 | range | 1 |
| 1.7.3 \<= v \< 1.7.3 | range | 1 |
| 1.7.3 | patched | 2 |
| 1.7.2 | patched | 1 |

## CVEs

| CVE | Title | Severity | CVSS | CISA KEV | Public exploit | Patch |
| --- | --- | --- | --- | --- | --- | --- |
| CVE-2021-24329 | WP Super Cache \< 1.7.3 - Authenticated Stored Cross-Site Scripting (XSS) | medium | 5.4 | No | Yes | Yes |
| CVE-2021-24312 | WP Super Cache \< 1.7.3 - Authenticated Remote Code Execution | high | 7.2 | No | Yes | Yes |
| CVE-2021-24209 | WP Super Cache \< 1.7.2 - Authenticated Remote Code Execution (RCE) | high | 7.2 | No | Yes | Yes |
| CVE-2013-2010 | - | critical | 9.8 | No | Yes | Yes |
| CVE-2013-2009 | - | high | 8.8 | No | Yes | Yes |
| CVE-2013-2008 | - | medium | 6.1 | No | No | Yes |

## Frequently asked questions

### How many CVEs does Automattic WP Super Cache have?

Automattic WP Super Cache has 6 published CVE records since 2020.

### How many Automattic WP Super Cache CVEs are in CISA KEV?

None of Automattic WP Super Cache's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

### Are there public exploits for Automattic WP Super Cache vulnerabilities?

Yes — 5 of Automattic WP Super Cache's CVEs have a known public exploit.

### Which versions of Automattic WP Super Cache are affected?

8 distinct Automattic WP Super Cache versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

### What are the most common weakness types in Automattic WP Super Cache CVEs?

Automattic WP Super Cache's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-94 (Improper Control of Generation of Code ('Code Injection')), CWE-74 (Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')).

### How many critical Automattic WP Super Cache vulnerabilities are there?

Automattic WP Super Cache has 1 critical and 3 high-severity CVEs.

### What is the average severity of Automattic WP Super Cache CVEs?

The average CVSS base score across Automattic WP Super Cache's scored CVEs is 7.4.

## Other products from this vendor

- [Jetpack](https://radicalnotion.ai/vendor/automattic/jetpack) (20 CVEs)
- [WooCommerce](https://radicalnotion.ai/vendor/automattic/woocommerce) (19 CVEs)
- [Sensei LMS](https://radicalnotion.ai/vendor/automattic/sensei-lms) (10 CVEs)
- [mongoose](https://radicalnotion.ai/vendor/automattic/mongoose) (8 CVEs)
- [activitypub](https://radicalnotion.ai/vendor/automattic/activitypub) (6 CVEs)
- [sensei](https://radicalnotion.ai/vendor/automattic/sensei) (6 CVEs)
- [WordPress](https://radicalnotion.ai/vendor/automattic/wordpress) (6 CVEs)
- [Jetpack CRM](https://radicalnotion.ai/vendor/automattic/jetpack-crm) (5 CVEs)

---

Source: [RadicalNotion.AI](https://radicalnotion.ai/vendor/automattic/wp-super-cache). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.