CVE-2021-24329: Automattic Wp Super Cache

Medium severity, CVSS 5.4. EPSS: 4.5% chance of exploitation in the next 30 days.

The WP Super Cache WordPress plugin before 1.7.3 did not properly sanitise its wp_cache_location parameter in its settings, which could lead to a Stored Cross-Site Scripting issue.

Affected products

• Automattic Wp Super Cache: before 1.7.3 (fixed in 1.7.3)

Published 2021-06-01. Last modified 2026-06-17.