Skip to content
OpenAdvisories

Vendor

litespeedtech

17 known vulnerabilities.

Products

LiteSpeed Cache 11 lsquic 3 openlitespeed 2 LiteSpeed Web Server 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.2
    CVE-2026-93389

    LiteSpeed Cache <= 7.9.1 - Unauthenticated Sensitive Information Disclosure (WooCommerce Store API Cart/Checkout PII + Cart-Token) via Public REST Caching

    The LiteSpeed Cache plugin for WordPress is vulnerable to unauthenticated disclosure of sensitive WooCommerce customer data in all versions up to, and including, 7.9.1 With Cache REST enabled (the shipped default cache-rest=1), LiteSpeed stores WooCommerce St…

    litespeedtech LiteSpeed Cache Web / CMS
  • High 7.5
    CVE-2026-115482

    In lsquic before 4.9.0, the HTTP/3 implementation can use an excessive amount of memory because the number of buffered …

    litespeedtech lsquic
  • High 7.2
    CVE-2026-18978

    LiteSpeed Cache <= 7.8.1 - Unauthenticated Stored Cross-Site Scripting via Comment Content

    The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all versions up to, and including, 7.8.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attack…

    litespeedtech LiteSpeed Cache Web / CMS
  • High 7.2
    CVE-2026-3375

    LiteSpeed Cache <= 7.7 - Unauthenticated Stored Cross-Site Scripting via QUIC.cloud CCSS/UCSS REST API Endpoints

    The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the /wp-json/litespeed/v1/notify_ccss and /wp-json/litespeed/v1/notify_ucss REST API endpoints in all versions up to, and including, 7.7. These endpoints accept CSS cont…

    litespeedtech LiteSpeed Cache Web / CMS