Security Risk: Dangerous Exploitation Level: Very Easy/Remote DREAD Score: 8/10 Vulnerability: Persistent XSS Patched Version: 1.4.4 During a routine audit for our Website Firewall (WAF), we discovered a dangerous persistent XSS vulnerability affecting the very popular WP-Super-Cache plugin (more than a million active installs according to WordPress.org). The security issue, as well as another bug
![Security Advisory: Persistent XSS in WP-Super-Cache](https://cdn-ak-scissors.b.st-hatena.com/image/square/4ea3befe3cc1e18db88f39ecac8e390b0afb1d97/height=288;version=1;width=512/https%3A%2F%2Fblog.sucuri.net%2Fwp-content%2Fuploads%2F2015%2F03%2FDisclosure-Image-Wordpress.jpg)