WP Super Cache

3.1.1 – 2026-05-27

Security: harden supercache filename generation so request-derived data cannot escape the cache directory.

Fix: avoid a fatal error on PHP 8+ when closing an unopened file handle in supercache-only mode.

Fix: cast the blog ID in wp_cache_clear_cache() so non-integer callers no longer trigger a multisite-only function on single-site installs.

Fix: no longer append HTML debug comments to REST API, Ajax, JSON, WooCommerce API, and XML-RPC responses.

Fix: avoid a PHP warning when a comment has already been deleted before the cache-clear routine runs.

3.1.0 – 2026-04-14

Disable caching for wp_die() error pages

Harden the plugin in various ways.

Fix: use fileperms() instead of stat() and fix escaping

Add WordPress.org Live Preview Blueprint.

Minimum WordPress version bumped to 6.8.

Device Detection: use an embedded version instead of the Composer dependency.

Fix: str_starts_with() null deprecation on PHP 8.1+.

Fix: handle array type for supercache_last_cached option.

See previous releases on GitHub.