WordPress News
W3 Total Cache 2.10.2 Released
What’s new in W3 Total Cache 2.10.2
Released: 2026-07-16
Active installations: 900,000
Tested up to WordPress 7.0.2
Requires PHP 7.4
Changelog
- Fix: Disk cache: Restore file-locking writes on PHP 8+
- Fix: Apache: Limit Options -MultiViews in page cache rules to compatibility mode
- Fix: Page Cache: Skip storing redirect responses
Previous releases
2.10.1
- Fix: General Settings: “The link you followed has expired” when emptying all caches
- Fix: Redis/Memcached/CDN: Restore connection handling after 2.10.0 at-rest credential encryption
- Fix: At-rest credentials: Defer encryption until WordPress salts are available
- Fix: Always Cached: Queue regeneration on nginx with Disk: Enhanced page cache
- Fix: mfunc: Render unrecognized dynamic-fragment tags as empty output
2.10.0
- Security: Hardened authorization, capability, and request-verification (nonce/CSRF) checks across admin and AJAX endpoints
- Security: Improved input validation and output escaping to prevent cross-site scripting (XSS)
- Security: Strengthened protections against code, command, and file-inclusion injection
- Security: Hardened processing of dynamic and cached content, including data serialization
- Security: Restricted outbound server-side requests to mitigate server-side request forgery (SSRF)