Supercache file Critical warning

Hi @florismk, Thanks for reaching out.

Are you using any caching plugins on the site? Can you please confirm the plugin and the version you’re on?

There is a  high chance that this warning is legitimate as it has been detected by Wordfence. I suspect this may be due to an outdated plugin. Can you confirm that all your plugins are up to date? Sometimes backdoors are unsecured maintenance scripts accidentally left behind after authorized site maintenance.

You can download the files highlighted using FTP, or your host’s web-based file manager and send them to [email protected] where our team can inform you whether any action is necessary to resolve the issue. In your email, please include a link to this forum topic so that our team will know you had raised the issue with us.

Please note that when attaching files, ensure that you remove any database access credentials or keys/salts contained inside before sending.

Thanks,

Mark.

Hi @florismk, Thank you for getting back to us and sending the files.

Our team will look into them and get back to you in case of any issues.

Good to hear that your plugins are up to date. For versions  below 1.8, WP Super Cache had a known vulnerability that has since been patched for versions 1.9 and above as documented here:

https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/wp-super-cache/wp-super-cache-18-unauthenticated-cache-poisoning 

Should you need any further assistance, please create a new topic and we will be happy to help.

Thanks,

Mark.