WordPress OSINT, maintenance or security needs? Reach out!
TLDWP

Plugin: wp-super-cache (Used by 237 domains)

WP Super Cache

👤 Automattic 📦 v3.0.3 🔗 Plugin Homepage

This plugin generates static html files from your dynamic WordPress blog. After a html file is generated your webserver will serve that file instead of processing the comparatively heavier and more expensive WordPress PHP scripts.

The static html files will be served to the vast majority of your users:

  • Users who are not logged in.
  • Users who have not left a comment on your blog.
  • Or users who have not viewed a password protected post.

99% of your visitors will be served static html files. One cached file can be served thousands of times. Other visitors will be served custom cached files tailored to their visit. If they are logged in, or have left comments those details will be displayed and cached for them.

The plugin serves cached files in 3 ways (ranked by speed):

  1. Expert. The fastest method is by using Apache mod_rewrite (or whatever similar module your web server supports) to serve “supercached” static html files. This completely bypasses PHP and is extremely quick. If your server is hit by a deluge of traffic it is more likely to cope as the requests are “lighter”. This does require the Apache mod_rewrite module (which is probably installed if you have custom permalinks) and a modification of your .htaccess file which is risky and may take down your site if modified incorrectly.
  2. Simple. Supercached static files can be served by PHP and this is the recommended way of using the plugin. The plugin will serve a “supercached” file if it exists and it’s almost as fast as the mod_rewrite method. It’s easier to configure as the .htaccess file doesn’t need to be changed. You still need a custom permalink. You can keep portions of your page dynamic in this caching mode.
  3. WP-Cache caching. This is mainly used to cache pages for known users, URLs with parameters and feeds. Known users are logged in users, visitors who leave comments or those who should be shown custom per-user data. It’s the most flexible caching method and slightly slower. WP-Cache caching will also cache visits by unknown users if supercaching is disabled. You can have dynamic parts to your page in this mode too. This mode is always enabled but you can disable caching for known users, URLs with parameters, or feeds separately. Set the constant “DISABLE_SUPERCACHE” to 1 in your wp-config.php if you want to only use WP-Cache caching.

If you’re not comfortable with editing PHP files then use simple mode. It’s easy to set up and very fast.

Recommended Settings

  1. Simple caching.
  2. Compress pages.
  3. Don’t cache pages for known users.
  4. Cache rebuild.
  5. CDN support.
  6. Extra homepage checks.

Garbage collection is the act of cleaning up cache files that are out of date and stale. There’s no correct value for the expiry time but a good starting point is 1800 seconds.

Consider deleting the contents of the “Rejected User Agents” text box and allow search engines to cache files for you.

Preload as many posts as you can and enable “Preload Mode”. Garbage collection of old cached files will be disabled. If you don’t care about sidebar widgets updating often set the preload interval to 2880 minutes (2 days) so all your posts aren’t recached very often. When the preload occurs the cache files for the post being refreshed is deleted and then regenerated. Afterwards a garbage collection of all old files is performed to clean out stale cache files.
Even with preload mode enabled cached files will still be deleted when posts are modified or comments made.

Development

  • Active development of this plugin is handled on GitHub.
  • Translation of the plugin into different languages is on the translation page.

Documentation

If you need more information than the following, you can have a look at the wiki or the Developer documentation.

Preloading

You can generate cached files for the posts, categories and tags of your site by preloading. Preloading will visit each page of your site generating a cached page as it goes along, just like any other visitor to the site. Due to the sequential nature of this function, it can take some time to preload a complete site if there are many posts.
To make preloading more effective it can be useful to disable garbage collection so that older cache files are not deleted. This is done by enabling “Preload Mode” in the settings. Be aware however, that pages will go out of date eventually but that updates by submitting comments or editing posts will clear portions of the cache.

Garbage Collection

Your cache directory fills up over time, which takes up space on your server. If space is limited or billed by capacity, or if you worry that the cached pages of your site will go stale then garbage collection has to be done. Garbage collection happens on a regular basis and deletes old files in the cache directory. On the advanced settings page you can specify:
1. Cache timeout. How long cache files are considered fresh for. After this time they are stale and can be deleted.
2. Scheduler. Setup how often garbage collection should be done.
3. Notification emails. You can be informed on garbage collection job progress.
There’s no right or wrong settings for garbage collection. It depends on your own site.
If your site gets regular updates, or comments then set the timeout to 1800 seconds, and set the timer to 600 seconds.
If your site is mostly static you can disable garbage collection by entering 0 as the timeout, or use a really large timeout value.

The cache directory, usually wp-content/cache/ is only for temporary files. Do not ever put important files or symlinks to important files or directories in that directory. They will be deleted if the plugin has write access to them.

CDN

A Content Delivery Network (CDN) is usually a network of computers situated around the world that will serve the content of your website faster by using servers close to you. Static files like images, Javascript and CSS files can be served through these networks to speed up how fast your site loads. You can also create a “poor man’s CDN” by using a sub domain of your domain to serve static files too.

OSSDL CDN off-linker has been integrated into WP Super Cache to provide basic CDN support. It works by rewriting the URLs of files (excluding .php files) in wp-content and wp-includes on your server so they point at a different hostname. Many CDNs support origin pull. This means the CDN will download the file automatically from your server when it’s first requested, and will continue to serve it for a configurable length of time before downloading it again from your server.

Configure this on the “CDN” tab of the plugin settings page. This is an advanced technique and requires a basic understanding of how your webserver or CDNs work. Please be sure to clear the file cache after you configure the CDN.

REST API

There are now REST API endpoints for accessing the settings of this plugin. You’ll need to be authenticated as an admin user with permission to view the settings page to use it. This has not been documented yet but you can find all the code that deals with this in the “rest” directory.

Custom Caching

It is now possible to hook into the caching process using the add_cacheaction() function.

Three hooks are available:

  1. ‘wp_cache_get_cookies_values’ – modify the key used by WP Cache.
  2. ‘add_cacheaction’ – runs in phase2. Allows a plugin to add WordPress hooks.
  3. ‘cache_admin_page’ – runs in the admin page. Use it to modify that page, perhaps by adding new configuration options.

There is one regular WordPress filter too. Use the “do_createsupercache” filter
to customize the checks made before caching. The filter accepts one parameter.
The output of WP-Cache’s wp_cache_get_cookies_values() function.

WP Super Cache has its own plugin system. This code is loaded when WP Super Cache loads and can be used to change how caching is done. This is before most of WordPress loads so some functionality will not be available. Plugins can be located anywhere that PHP can load them. Add your own plugin either:

  • by putting your plugin in the wp-content/plugins/wp-super-cache-plugins directory, or
  • by calling wpsc_add_plugin( $name ) where $name is the full filename and path to the plugin. You only need to call that function once to add it. Use wpsc_delete_plugin( $name ) to remove it from the list of loaded plugins.

The cookies WP Super Cache uses to identify “known users” can be modified now by adding the names of those cookies to a list in the plugin configuration. Use wpsc_add_cookie( $name ) to add a new cookie, and wpsc_delete_cookie( $name ) to remove it. The cookie names also modify the mod_rewrite rules used by the plugin but I recommend using Simple mode caching to avoid complications with updating the .htaccess file.
The cookie name and value are used to differenciate users so you can have one cookie, but different values for each type of user on your site for example. They’ll be served different cache files.

See plugins/searchengine.php as an example I use for my No Adverts for Friends plugin.

Troubleshooting

If things don’t work when you installed the plugin here are a few things to check:

  1. Is wp-content writable by the web server?
  2. Is there a wp-content/wp-cache-config.php ? If not, copy the file wp-super-cache/wp-cache-config-sample.php to wp-content/wp-cache-config.php and make sure WPCACHEHOME points at the right place.
  3. Is there a wp-content/advanced-cache.php ? If not, then you must copy wp-super-cache/advanced-cache.php into wp-content/. You must edit the file and change the path so it points at the wp-super-cache folder.
  4. If pages are not cached at all, remove wp-content/advanced-cache.php and recreate it, following the advice above.
  5. Make sure the following line is in wp-config.php and it is ABOVE the “require_once(ABSPATH.’wp-settings.php’);” line:

    define( 'WP_CACHE', true );
    
  6. Try the Settings->WP Super Cache page again and enable cache.
  7. Look in wp-content/cache/supercache/. Are there directories and files there?
  8. Anything in your php error_log?
  9. If your browser keeps asking you to save the file after the super cache is installed you must disable Super Cache compression. Go to the Settings->WP Super Cache page and disable it there.
  10. The plugin does not work very well when PHP’s safe mode is active. This must be disabled by your administrator.
  11. If pages are randomly super cached and sometimes not, your blog can probably be viewed with and without the “www” prefix on the URL. You should choose one way and install the Enforce www preference plugin if you are using an old WordPress install. The latest versions redirect themselves (you should always be running the latest version of WordPress anyway!)
  12. Private Server users at Dreamhost should edit wp-content/wp-cache-config.php and set the cache dir to “/tmp/” if they are getting errors about increasing CPU usage. See this discussion for more.
  13. File locking errors such as “failed to acquire key 0x152b: Permission denied in…” or “Page not cached by WP Super Cache. Could not get mutex lock.” are a sign that you may have to use file locking. Edit wp-content/wp-cache-config.php and uncomment “$use_flock = true” or set $sem_id to a different value. You can also disable file locking from the Admin screen as a last resort.
  14. Make sure cache/wp_cache_mutex.lock is writable by the web server if using coarse file locking.
  15. The cache folder cannot be put on an NFS or Samba or NAS share. It has to be on a local disk. File locking and deleting expired files will not work properly unless the cache folder is on the local machine.
  16. Garbage collection of old cache files won’t work if WordPress can’t find wp-cron.php. If your hostname resolves to 127.0.0.1 it could be preventing the garbage collection from working. Check your access_logs for wp-cron.php entries. Do they return a 404 (file not found) or 200 code? If it’s 404 or you don’t see wp-cron.php anywhere WordPress may be looking for that script in the wrong place. You should speak to your server administator to correct this or edit /etc/hosts on Unix servers and remove the following line. Your hostname must resolve to the external IP address other servers on the network/Internet use. See http://yoast.com/wp-cron-issues/ for more. A line like “127.0.0.1 localhost localhost.localdomain” is ok.

    127.0.0.1 example.com
    
  17. If old pages are being served to your visitors via the supercache, you may be missing Apache modules (or their equivalents if you don’t use Apache). 3 modules are required: mod_mime, mod_headers and mod_expires. The last two are especially important for making sure browsers load new versions of existing pages on your site.
  18. The error message, “WP Super Cache is installed but broken. The path to wp-cache-phase1.php in wp-content/advanced-cache.php must be fixed!” appears at the end of every page. Open the file wp-content/advanced-cache.php in your favourite editor. Is the path to wp-cache-phase1.php correct? This file will normally be in wp-content/plugins/wp-super-cache/. If it is not correct the caching engine will not load.
  19. Caching doesn’t work. The timestamp on my blog keeps changing when I reload. Check that the path in your .htaccess rules matches where the supercache directory is. You may have to hardcode it. Try disabling supercache mode.
  20. If supercache cache files are generated but not served, check the permissions on all your wp-content/cache/supercache folders (and each of wp-content cache and supercache folders) and wp-content/cache/.htaccess. If your PHP runs as a different user to Apache and permissions are strict Apache may not be able to read the PHP generated cache files. To fix you must add the following line to your wp-config.php (Add it above the WP_CACHE define.) Then clear your cache.

    umask( 0022 );
    
  21. If you see garbage in your browser after enabling compression in the plugin, compression may already be enabled in your web server. In Apache you must disable mod_deflate, or in PHP zlib compression may be enabled. You can disable that in three ways. If you have root access, edit your php.ini and find the zlib.output_compression setting and make sure it’s “Off” or add this line to your .htaccess:

    php_flag zlib.output_compression off
    

    If that doesn’t work, add this line to your wp-config.php:

    ini_set('zlib.output_compression', 0);
    
  22. The “white screen of death” or a blank page when you visit your site is almost always caused by a PHP error but it may also be caused by APC. Disable that PHP extension if you have trouble and replace with eAccelerator or Xcache.
  23. After uninstalling, your permalinks may break if you remove the WordPress mod_rewrite rules too. Regenerate those rules by visiting the Settings->Permalink page and saving that form again.
  24. If your blog refuses to load make sure your wp-config.php is correct. Are you missing an opening or closing PHP tag?
  25. Your front …
DomainExposuresHeadersLast Checked
a*i*v*n*o.com 💀 F 2026-06-30 10:20:21
i*e*.com 💀 🔓 F 2026-06-30 09:50:58
b*j*t*c*s.com 💀 F 2026-06-30 07:43:47
c*p*u*.com (WP 3.5.1) 💀 ⚠️ 📡 👤 F 2026-06-21 21:37:29
j*n*e*i*s.net (WP 6.9.4) 👤 F 2026-06-19 13:43:18
n*v*n*p*d*a*t.com (WP 7.0) F 2026-06-14 01:41:12
h*e*u*a*o*.net D 2026-06-10 19:34:19
o*i*i*r*o*v*l.com 💀 👤 F 2026-06-08 06:31:18
b*n*u*t*e*.ru (WP 4.2.10) ⚠️ F 2026-06-08 01:04:52
j*h*p*a*k*.com (WP 6.7) 👤 F 2026-06-06 19:18:37
m*m*c*o.com (WP 6.9.4) 📂 F 2026-06-06 05:56:41
m*r*l*s*r*i*t*c*r*n.com 💀 📄 F 2026-06-05 23:56:16
g*r*i*a.com F 2026-06-05 16:33:06
a*c*e*l*s.com F 2026-06-03 23:55:54
f*e*e*e*g*m*i*e.com (WP 7.0) F 2026-06-03 18:31:47
t*e*r*c*l*s*g*i*e.com (WP 4.7.29) 💀 ⚠️ F 2026-06-03 17:33:39
b*b*n*y.com 💀 📄 F 2026-06-03 17:24:03
a*o*a*-*o*a*g*s.com F 2026-06-03 15:26:38
t*e*d*r*s*i*n*a*i*.com F 2026-06-03 04:00:26
s*m*r*e*i*n.com 🔓 F 2026-06-02 21:54:35
n*d*a*u*l*a*u*c*.com F 2026-06-02 15:57:26
c*p*a*l*a*v*n*u*e*.org (WP 7.0) F 2026-06-02 12:51:31
f*r*e*b*y*e*l*a*l.com (WP 4.6.29) 💀 ⚠️ 🔓 F 2026-06-01 22:52:18
a*d*o*i*u*l*g.com F 2026-06-01 12:32:01
h*y*u*a*b*o.com D 2026-06-01 11:04:00
e*i*i*c*a*a*.fr (WP 7.0) F 2026-06-01 02:44:14
t*c*c.com F 2026-05-31 20:45:55
t*e*i*e*e*i*n.com 💀 🔓 F 2026-05-31 19:53:55
c*r*s*n*o*s*l*.com (WP 6.9.4) F 2026-05-31 19:06:05
l*2*o*e.com 💀 F 2026-05-31 17:34:59
n*w*e*e*u*.com F 2026-05-31 01:03:54
t*e*u*i*a*y*o*p*e.com (WP 5.0.22) 💀 ⚠️ 🔓 F 2026-05-30 22:44:33
i*p*n*e*o*d*.com (WP 6.9.1) 💀 F 2026-05-30 20:26:18
r*n*e*o*t*n*.com (WP 6.7.2) F 2026-05-30 19:59:44
a*i*i*t*a*.vn D 2026-05-30 16:15:48
a*t*o*e*o*.com F 2026-05-30 15:00:28
r*m*d*l*p*.com F 2026-05-30 09:32:35

Top 50 Plugins

Plugin Count
elementor 1,781,350
contact-form-7 1,763,473
elementor-pro 1,056,403
woocommerce 818,396
revslider 613,184
jetpack 459,687
js_composer 423,500
wp-rocket 341,701
essential-addons-for-elementor-lite 267,186
complianz-gdpr 260,358
gravityforms 257,842
google-site-kit 232,120
cookie-law-info 230,851
instagram-feed 226,401
sitepress-multilingual-cms 212,109
header-footer-elementor 208,941
google-analytics-for-wordpress 207,506
bluehost-wordpress-plugin 193,159
elementskit-lite 182,255
gutenberg 167,504
cookie-notice 150,713
litespeed-cache 142,941
gtranslate 126,300
wpforms-lite 125,731
the-events-calendar 123,260
gutenberg-core 121,980
astra-sites 114,946
popup-maker 110,750
woocommerce-payments 110,631
tablepress 102,411
honeypot 98,192
astra-addon 94,627
wp-smushit 91,689
duracelltomi-google-tag-manager 90,994
layerslider 90,135
coblocks 89,955
all-in-one-seo-pack 89,864
bb-plugin 86,751
akismet 85,480
premium-addons-for-elementor 85,165
cleantalk-spam-protect 83,466
ml-slider 82,941
mailchimp-for-wp 82,596
megamenu 80,887
woocommerce-gateway-stripe 80,153
fusion-builder 77,796
jet-engine 77,676
ewww-image-optimizer 76,887
smart-slider-3 76,763
wp-pagenavi 76,618

Top 50 Themes

Theme Count
hello-elementor 623,608
Divi 500,513
astra 418,376
flatsome 137,115
Avada 122,205
generatepress 115,566
pub 84,984
oceanwp 81,354
kadence 79,424
enfold 69,500
salient 65,679
twentyseventeen 54,668
bb-theme 52,923
betheme 52,600
twentytwentyfour 52,508
blocksy 51,323
cocoon-master 49,331
dt-the7 45,735
twentytwentyfive 44,941
h4 42,389
woodmart 41,191
neve 38,486
Avada-Child-Theme 37,096
gox 36,285
bridge 31,680
twentytwentyone 30,564
lightning 29,886
twentytwenty 28,924
swell 27,928
bricks 26,537
Impreza 26,232
Newspaper 24,292
twentytwentythree 22,275
epik-redesign 19,258
twentytwentytwo 18,955
uncode 18,704
twentysixteen 17,709
pro 17,598
sydney 16,686
storefront 16,470
Total 14,553
hello-theme-child-master 14,056
factory-templates-4 13,746
extendable 13,275
themify-ultra 13,031
hestia 12,693
yootheme 12,635
yith-wonder 12,470
porto 12,064
jupiter 11,703