{"id":48064,"date":"2013-04-11T05:42:16","date_gmt":"2013-04-11T05:42:16","guid":{"rendered":"https:\/\/wordpress.org\/plugins-wp\/wp-safer-cache\/"},"modified":"2013-04-20T09:32:18","modified_gmt":"2013-04-20T09:32:18","slug":"wp-safer-cache","status":"closed","type":"plugin","link":"https:\/\/wordpress.org\/plugins\/wp-safer-cache\/","author":225969,"comment_status":"closed","ping_status":"closed","template":"","meta":{"version":"0.1.5","stable_tag":"0.1.5","tested":"3.6.1","requires":"3.5","requires_php":"","requires_plugins":"","header_name":"WP Safer Cache","header_author":"Frank Goossens (futtta)","header_description":"","assets_banners_color":"","last_updated":"2013-04-20 09:32:18","external_support_url":"","external_repository_url":"","donate_link":"","header_plugin_uri":"http:\/\/blog.futtta.be\/2013\/04\/10\/wp-safer-cache-stopgap-for-wordpress-cache-plugins-vulnerability\/","header_author_uri":"http:\/\/blog.futtta.be\/","rating":0,"author_block_rating":0,"active_installs":0,"downloads":553,"num_ratings":0,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation","faq","changelog"],"tags":[],"upgrade_notice":[],"ratings":{"1":0,"2":0,"3":0,"4":0,"5":0},"assets_icons":[],"assets_banners":[],"assets_blueprints":{},"all_blocks":[],"tagged_versions":["0.1.0","0.1.1","0.1.2","0.1.3","0.1.4","0.1.5"],"block_files":[],"assets_screenshots":[],"screenshots":[]},"plugin_section":[],"plugin_tags":[107,600,6460,1454,2636],"plugin_category":[44,54],"plugin_contributors":[],"plugin_business_model":[],"class_list":["post-48064","plugin","type-plugin","status-closed","hentry","plugin_tags-comments","plugin_tags-security","plugin_tags-vulnerability","plugin_tags-w3-total-cache","plugin_tags-wp-super-cache","plugin_category-discussion-and-community","plugin_category-security-and-spam-protection","plugin_committers-futtta"],"banners":[],"icons":{"svg":false,"icon":"https:\/\/s.w.org\/plugins\/geopattern-icon\/wp-safer-cache.svg","icon_2x":false,"generated":true},"screenshots":[],"raw_content":"\n

There was a vulnerability in WordPress installations that used WP Super Cache prior to version 1.3 or W3 Total Cache prior to version 0.9.2.9. This helper plugin was a stopgap solution for older versions. If you have upgraded WP Super Cache or W3 Total Cache, you can safely deactivate and remove this plugin.<\/p>\n

I've posted a \"post mortem\" of the vulnerability (reasons, fixes, timeline, ...) on my blog<\/a>.<\/p>\n

I will request this plugin to be removed from the wordpress.org plugin repository before the end of April.<\/p>\n\n\n

Just install form your WordPress \"Plugins|Add New\" screen and all will be well.<\/p>\n

Manual installation is very straightforward:<\/p>\n

    \n
  1. Upload the zip-file and unzip it in the \/wp-content\/plugins\/<\/code> directory<\/li>\n
  2. Activate the plugin through the 'Plugins' menu in WordPress<\/li>\n<\/ol>\n\n\n

    When do I need this helper plugin?<\/h4>\n

    Only if you are using WP Super Cache prior to version 1.3 (do upgrade to the latest version<\/a> which does not have this vulnerability!) or W3 Total Cache prior to version 0.9.2.9.<\/p>\n

    Where can I find more info about the vulnerability?<\/h4>\n

    I wrote a \"post mortem\"<\/a> about the reasons, different fixes and the timeline of events of this security issue.<\/p>\n

    I found a bug\/ I would like a feature to be added!<\/h4>\n

    Use the WP Safer Cache support forum at wordpress.org<\/a> or the contact-page on my blog<\/a>.<\/p>\n\n\n

    0.1.5<\/h4>\n
      \n
    • mark plugin as redundant<\/li>\n<\/ul>\n

      0.1.4<\/h4>\n
        \n
      • W3 Total Cache version 0.9.2.9 fixes a.o. this security issue, do upgrade!<\/li>\n<\/ul>\n

        0.1.3<\/h4>\n
          \n
        • copied some stuff from WP Super Cache fix (to filter comments already submitted)<\/li>\n
        • fix for HTML-comments starting in one comment and ending in the next one (as discovered by kisscsaby)<\/li>\n<\/ul>\n

          0.1.2<\/h4>\n
            \n
          • fixed typo in regex (thx Donncha)<\/li>\n
          • declared WP Super Cache 1.3 as fixed (i.e. does not need this plugin)<\/li>\n<\/ul>\n

            0.1.1<\/h4>\n
              \n
            • improved regex based on input from kisscsaby<\/li>\n<\/ul>\n

              0.1.0<\/h4>\n
                \n
              • Initial version<\/li>\n<\/ul>","raw_excerpt":"Small helper plugin to protect blogs with older versions of WP Super Cache and W3 Total Cache from unsane comments.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/48064","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=48064"}],"author":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/futtta"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=48064"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=48064"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=48064"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=48064"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=48064"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=48064"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}