Skip to content
OpenAdvisories

Vendor

LiteSpeed Technologies

20 known vulnerabilities.

Products

LiteSpeed Cache 12 OpenLiteSpeed Web Server 3 LiteSpeed Web Server 3 cPanel Plugin 2 OpenLiteSpeed 2 WHM Plugin 1 LSWS Enterprise 1 LiteSpeed Web Server Enterprise 1
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • High 7.2
    CVE-2026-84761

    WordPress LiteSpeed Cache plugin <= 7.9 - Server Side Request Forgery (SSRF) vulnerability

    Unauthenticated Server Side Request Forgery (SSRF) in LiteSpeed Cache <= 7.9 versions.

    LiteSpeed Technologies LiteSpeed Cache
  • High 8.5
    CVE-2026-54420 Exploited Public exploit

    LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mishandles symlinks provid…

    LiteSpeed Technologies cPanel Plugin
    KEV Jun 15, 2026
  • High 7.2
    CVE-2026-31386

    OpenLiteSpeed and LSWS Enterprise provided by LiteSpeed Technologies contain an OS command injection vulnerability. An …

    LiteSpeed Technologies OpenLiteSpeed LSWS Enterprise
  • High 8.8
    CVE-2021-47903

    LiteSpeed Web Server Enterprise 5.4.11 - Command Injection

    LiteSpeed Web Server Enterprise 5.4.11 contains an authenticated command injection vulnerability in the external app configuration interface. Authenticated administrators can inject shell commands through the 'Command' parameter in the server configuration, a…

    LiteSpeed Technologies LiteSpeed Web Server Enterprise
  • High 7.2
    CVE-2021-47855

    Openlitespeed 1.7.9 - 'Notes' Stored Cross-Site Scripting

    Openlitespeed 1.7.9 contains a stored cross-site scripting vulnerability in the dashboard's Notes parameter that allows administrators to inject malicious scripts. Attackers can craft a payload in the Notes field during listener configuration that will execut…

    LiteSpeed Technologies OpenLiteSpeed
  • High 8.1
    CVE-2024-50550

    WordPress LiteSpeed Cache plugin <= 6.5.1 - Privilege Escalation vulnerability

    Incorrect Privilege Assignment vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache allows Privilege Escalation.This issue affects LiteSpeed Cache: from n/a through <= 6.5.1.

    LiteSpeed Technologies LiteSpeed Cache
  • High 8.8
    CVE-2024-47637

    WordPress LiteSpeed Cache plugin <= 6.4.1 - Path Traversal vulnerability

    Relative Path Traversal vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache allows Path Traversal.This issue affects LiteSpeed Cache: from n/a through <= 6.4.1.

    LiteSpeed Technologies LiteSpeed Cache
  • High 7.1
    CVE-2024-47374 Scanner template

    WordPress LiteSpeed Cache plugin <= 6.5.0.2 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache allows Stored XSS.This issue affects LiteSpeed Cache: from n/a through <= 6.5.0.2.

    LiteSpeed Technologies LiteSpeed Cache
  • High 8.2
    CVE-2023-45000

    WordPress LiteSpeed Cache plugin <= 5.7 - Unauthenticated Broken Access Control on API vulnerability

    Missing Authorization vulnerability in LiteSpeed Technologies LiteSpeed Cache.This issue affects LiteSpeed Cache: from n/a through 5.7.

    LiteSpeed Technologies LiteSpeed Cache
  • High 8.3
    CVE-2023-40000 Public exploit Scanner template EPSS 55%

    WordPress LiteSpeed Cache plugin <= 5.7 - Unauthenticated Site Wide Stored XSS vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LiteSpeed Technologies LiteSpeed Cache allows Stored XSS.This issue affects LiteSpeed Cache: from n/a through 5.7.

    LiteSpeed Technologies LiteSpeed Cache
  • High 8.8
    CVE-2022-0074

    Privilege Escalation in OpenLiteSpeed Web Server

    Untrusted Search Path vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server Container allows Privilege Escalation. This affects versions from 1.6.15 before 1.7.16.1.

    LiteSpeed Technologies LiteSpeed Web Server OpenLiteSpeed Web Server
  • High 8.8
    CVE-2022-0073

    Authenticated Remote Code Execution in OpenLiteSpeed Web Server

    Improper Input Validation vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards allows Command Injection. This affects 1.7.0 versions before 1.7.16.1.

    LiteSpeed Technologies OpenLiteSpeed Web Server LiteSpeed Web Server