PLUGIN SECURITY

Is SpeedyCache safe?

SpeedyCache is a WordPress cache plugin that helps you improve performance of your WordPress site by caching, minifying, and compressing your website.

What this plugin does

  • Slug: speedycache
  • Author: Softaculous
  • 600000+ active installs
  • 88/100 rating (30 reviews on wordpress.org)
  • 4508055 all-time downloads
  • On WordPress.org since 2023-02-01

cachecdnminifypagespeedseo

Maintenance status

  • Latest known version: 1.4.0
  • Last updated: 2026-06-24 11:58am GMT
  • Tested up to WordPress: 7.0.4
  • Requires PHP: 7.0+
  • Max supported PHP (analyzed): 8.4

Known vulnerabilities

4 known CVEs on file for SpeedyCache. Reported between 2023 and 2024.

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2024-43299 SpeedyCache – Cache, Optimization, Performance [speedycache] < 1.1.9 Cross-Site Request Forgery (CSRF) Medium 5.4 < 1.1.9 1.1.9 2024-08-16 ✓ fixed in latest
CVE-2026-5114 SpeedyCache – Cache, Optimization, Performance [speedycache] < 1.3.9 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Medium 4.9 < 1.3.9 1.3.9 2024-08-16 ✓ fixed in latest
CVE-2023-6598 SpeedyCache – Cache, Optimization, Performance [speedycache] < 1.1.4 Missing Authorization Medium 4.3 < 1.1.4 1.1.4 2023-12-16 ✓ fixed in latest
CVE-2023-49746 SpeedyCache – Cache, Optimization, Performance [speedycache] < 1.1.3 Server-Side Request Forgery (SSRF) Medium 4.9 < 1.1.3 1.1.3 2023-12-04 ✓ fixed in latest
SpeedyCache – Cache, Optimization, Performance [speedycache] < 1.1.3 Unknown < 1.1.3 1.1.3 2023-12-01 ✓ fixed in latest

How to fix it

Keep SpeedyCache updated — 1.4.0 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").

This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.

Safer / more established alternatives

Check your own WordPress site

Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.