Skip to content
OpenAdvisories

Vendor

LiteSpeed Technologies

20 known vulnerabilities.

5 results · Clear filters · Feed

  • High 8.5
    CVE-2026-54420 Exploited Public exploit

    LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mishandles symlinks provid…

    KEV Jun 15, 2026
  • Critical 10.0
    CVE-2026-48172 Exploited Public exploit EPSS 18%

    LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as exploited in the wild …

    KEV May 26, 2026
  • Critical 9.8
    CVE-2024-44000 Public exploit EPSS 82%

    WordPress LiteSpeed Cache plugin < 6.5.0.1 - Unauthenticated Account Takeover via Cookie Leak vulnerability

    Insufficiently Protected Credentials vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache allows Authentication Bypass.This issue affects LiteSpeed Cache: from n/a through < 6.5.0.1.

  • Critical 9.8
    CVE-2024-28000 Public exploit EPSS 68%

    WordPress LiteSpeed Cache plugin <= 6.3.0.1 - Unauthenticated Privilege Escalation vulnerability

    Incorrect Privilege Assignment vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache.This issue affects LiteSpeed Cache: from n/a through <= 6.3.0.1.

  • High 8.3
    CVE-2023-40000 Public exploit EPSS 55%

    WordPress LiteSpeed Cache plugin <= 5.7 - Unauthenticated Site Wide Stored XSS vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LiteSpeed Technologies LiteSpeed Cache allows Stored XSS.This issue affects LiteSpeed Cache: from n/a through 5.7.