W3 Total Cache Pro icon

7 versions

W3 Total Cache Pro history.

Every release of W3 Total Cache Pro is archived here with its changelog, file size, and security scan result. Use the archive to roll back to a stable release or audit what changed between updates.

6 of 7 releases scanned clean
v2.10.1Latest
July 10, 20269.2 MBScanned
Fixed
  • General Settings: "The link you followed has expired" when emptying all caches
  • Redis/Memcached/CDN: Restore connection handling after 2.10.0 at-rest credential encryption
  • At-rest credentials: Defer encryption until WordPress salts are available
  • Always Cached: Queue regeneration on nginx with Disk: Enhanced page cache
  • mfunc: Render unrecognized dynamic-fragment tags as empty output
  • Apache: Remove Options -MultiViews from root .htaccess (HTTP 500 on restrictive AllowOverride)
  • Multisite: Admin page links in network admin
June 24, 20269.1 MBScanned
* Security: Hardened authorization, capability, and request-verification (nonce/CSRF) checks across admin and AJAX endpoints * Security: Improved input validation and output escaping to prevent cross-site scripting (XSS) * Security: Strengthened protections against code, command, and file-inclusion injection * Security: Hardened processing of dynamic and cached content, including data serialization * Security: Restricted outbound server-side requests to mitigate server-side request forgery (SSRF) * Security: Restricted configuration changes to prevent unauthorized modification * Security: Improved handling of stored credentials, cookies, and generated server-configuration files * Security: Reduced potential information disclosure and improved security logging
April 6, 20269.2 MBScanned
Fixed
  • Output buffering: Reverted to previous output buffering from 2.9.1
  • Cloudflare: Token/Key validation
  • Prevent mfunc processing bypss by user-agent
v2.9.2Unavailable
March 6, 20269.2 MBScanned
Fixed
  • Patch broken access control for Image Service AJAX operations
  • mfunc dynamic output buffering fatal error causing blank pages
  • Patch mfunc security vulnerability
v2.9.1Unavailable
January 16, 20269.2 MBScanned
Fixed
  • Image Converter: Reset request when status is 404
  • Image Converter: Better handling of separate format requests
  • Image Converter: UI/JS changes
  • Config caching/saving issue
v2.9.0Unavailable
January 15, 20269.2 MBUnknown
Added
  • Next-Gen AVIF image conversion (Pro)
  • Added notices for some billing issues
Fixed
  • Bunny CDN purge section
  • New Relic API
  • Nginx + Memcached Unix socket compatability
Improved
  • Setup Guide Wizard and test improvements
  • WebP Converter renamed to Image Converter
December 24, 20259.3 MBScanned
Fixed
  • Elementor: Carousel lazy load
  • Elementor: Cache clearing issues
  • Strip all mfunc/mclude tags from REST, feeds, and comments
  • Better validation for file directory cleanup
  • Bunny CDN: Settings page purge URL section
  • Minify: Auto JS: Handle async and defer attributes with values
  • Google PageSpeed: Lighthouse changes
  • Cloudflare: Undefined array warning
  • Rackspace API: Reponse code handling
  • License deactivation messages
Improved
  • ChartJS updated to v4.4.1
Added
  • Added support links

Why archive

Sometimes the latest release isn't the one you need. The archive lets you pin W3 Total Cache Pro to a known-good version, or roll back while a bug is investigated. Every release stays scanned and reachable.