Update description

Author: jvazquez-r7

modules/exploits/unix/webapp/php_wordpress_total_cache.rb

@@ -17,10 +17,11 @@ def initialize(info = {})
 			'Name'           => 'Wordpress W3 Total Cache PHP Code Execution',
 			'Description'    => %q{
 					This module exploits a PHP Code Injection vulnerability on the W3 Total Cache
-				wordpress plugin up to and including 0.9.2.8 version. The exploit is due to the
-				handle of some special macros, such as mfunc, which allow to inject arbitrary PHP
-				code. A valid post id where publish the malicious comment is needed. The user can
-				provide it with the POSTID option, otherwise a valid one will try to be brute
+				wordpress plugin up to and including 0.9.2.8 version. Versions up to and including
+				1.2 of WP Super Cache plugin are also reported as vulnerable. The exploit is due to
+				the handle of some special macros, such as mfunc, which allow to inject arbitrary
+				PHP code. A valid post id where publish the malicious comment is needed. The user
+				can provide it with the POSTID option, otherwise a valid one will try to be brute
 				forced. Also, if anonymous comments aren't allowed, valid credentials must be
 				provided. Finally, comments shouldn't be moderated in order finish the exploitation
 				successfully. This module has been tested against Wordpress 3.5 and W3 Total Cache