¿Es seguro Sg Cachepress?

Qué hace este plugin

• Slug: sg-cachepress
• 1000000+ instalaciones activas

cachingnginxperformanceSiteGroundspeed

Estado de mantenimiento

• Última versión conocida: 7.8.0
• Requiere PHP: 7.0+
• PHP máximo soportado (analizado): 8.4

Vulnerabilidades conocidas

3 CVEs conocidos registrados para Sg Cachepress. Reportadas entre 2019 y 2026.

CVE-2026-3220

The Autoptimize WordPress plugin before 3.1.15, Clearfy Cache WordPress plugin before 2.4.2, Speed Optimizer WordPress plugin before 7.7.9 are vulnerable to unauthenticated Stored Cross-Site Scripting (XSS) due to a predictable replacement hash used during the HTML minification process and abusing a regular expression. This allows an attacker to inject arbitrary HTML attributes in the final HTML output by anticipating the placeholder format.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: CVE.org

CVE-2019-25217

The SiteGround Optimizer plugin for WordPress is vulnerable to authorization bypass leading to Remote Code Execution and Local File Inclusion in versions up to, and including, 5.0.12 due to incorrect use of an access control attribute on the switch_php function called via the /switch-php REST API route. This allows attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: CVE.org

CVE-2024-32532

The Speed Optimizer – The All-In-One WordPress Performance-Boosting Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the purge_on_other_events() function in all versions up to, and including, 7.4.6. This makes it possible for unauthenticated attackers to purge the cache.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: Wordfence

Speed Optimizer – The All-In-One Performance-Boosting Plugin [sg-cachepress] < 5.0.13

The SiteGround Optimizer plugin for WordPress is vulnerable to authorization bypass leading to Remote Code Execution and Local File Inclusion in versions up to, and including, 5.0.12 due to incorrect use of an access control attribute on the switch_php function called via the /switch-php REST API route. This allows attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: Wordfence

Speed Optimizer – The All-In-One Performance-Boosting Plugin [sg-cachepress] < 5.0.13

According to the original researchers: "A successful attack on the SiteGround Optimizer would allow bad actors to store backdoors on vulnerable sites."

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: WPScan

Cómo solucionarlo

Mantén Sg Cachepress actualizado — 7.8.0 es la última versión en wordpress.org, y cada CVE de arriba indica la versión exacta que lo corrigió ("Corregido en").

Este es el historial completo de vulnerabilidades conocidas del plugin, no un escaneo de una instalación específica — ejecuta un escaneo gratis de tu propio sitio para verificar tu versión instalada exacta.

Alternativas más seguras / más establecidas

• LiteSpeed Cache — 7000000+ instalaciones activas — 96/100 (2761) — PHP máx. 8.4
• WP Super Cache — 1000000+ instalaciones activas — 86/100 (1343) — PHP máx. 8.4
• WP-Optimize – Cache, Compress images, Minify & Clean database to boost page speed & performance — 1000000+ instalaciones activas — 96/100 (2594) — PHP máx. <8.0
• W3 Total Cache — 900000+ instalaciones activas — 88/100 (5419)
• Redis Object Cache — 400000+ instalaciones activas — 90/100 (175)