wp-super-cache vulnerable to PHP Injection?

Please email me at donncha at ocaoimh.ie with some details and what you know, thanks!

There is no vulnerability. A small bug allowed the cache to create empty directories outside of the supercache folder but it’s fixed in 0.3.1

Very Important!

I’ve to re-open this post as the vulnerabilities mentioned by factoryjoe are still exisiting, even in the latest version 0.5.1

For the past 20 days, I was testing each and every plugin and template files and today. I’m zeored on WordPress Super Cache the cause of the vulnerabilities.

After digging further, I came across similiar incidents and immediately posted here for Donncha attention, as my comments are not passed through his blog.

caused by this problem, so i moved using wp-cache, it untill there’s something like confirmation or guarantee by donncha about that vuln, i don’t want my wp blog will be hacked. thanks

Hello Donncha,

First off, thanks for the reply and the fantastic work on Super Cache.

1. Re. my comments on your blog: I had tried many times and left about 10 comments about the bugs that I came across, as I’m using, right from the first release.

Did you get a moderation message?

Unfortunately never, that’s why, I’ve written, my comments never passes on your blog.

2. I’ve received your email just few minutes back, I’ve replaced the code as suggested by you and replied you back with some additional inputs.

@diabolus, I can only say, just go ahead and install the plugin, as there’s is no security hole or serious exploit. It’s only a minor bug, that’s creating some folders in the root directory, during cache creation. This is what I could assume after spending 20 days.

Donnacha can give more insight on this.

You can read my detailed report here:
http://wordpress.org/support/topic/146322?replies=1

Note: Don’t forget to make your root folder read-only.

I did the same yesterday, just for testing, as I couldn’t hear anything from anybody. And since than, no new folders appeared.

Important: Donnacha has also adviced the same on the above post.

i’ve found both WP-CACHE and supercache to be allowing people to inject php files into my wp-content, wp-content/cache, and wp-content/cache/supercache directories.

i’ve changed the permissions on wp-content to 755. is there anything else i can do to secure my wordpress install from these injections?