Looking for the vulnerability index of Invicti's legacy products?
W3 total cache debug mode - Vulnerability Database

W3 total cache debug mode

Description

W3 Total Cache is a popular WordPress caching plugin that includes a debug mode feature for troubleshooting cache configurations. When debug mode is enabled, the plugin appends detailed technical information about caching operations as HTML comments directly in the page source code. This debug mode has been detected as active on the target website, exposing internal cache configuration details to any visitor who views the page source.

Remediation

Disable W3 Total Cache debug mode immediately on production websites. To disable debug mode, follow these steps:

1. Log in to the WordPress admin dashboard
2. Navigate to Performance > General Settings
3. Scroll to the 'Debug' section
4. Uncheck all debug mode options
5. Click 'Save all settings'

Alternatively, debug mode can be disabled by editing the W3 Total Cache configuration file directly. Locate the file wp-content/w3tc-config/master.php and ensure the following settings are set to false:

"dbcache.debug" => false,
"objectcache.debug" => false,
"pgcache.debug" => false,
"minify.debug" => false

After making changes, clear all caches and verify that debug comments no longer appear in the page source. Debug mode should only be enabled temporarily in non-production environments when actively troubleshooting caching issues.

Related Vulnerabilities