Description
Insufficiently Protected Credentials vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache allows Authentication Bypass.This issue affects LiteSpeed Cache: from n/a through < 6.5.0.1.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| LiteSpeed Technologies | LiteSpeed Cache | ≤ 6.5.0.1 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Metasploit 1 module
-
Wordpress LiteSpeed Cache plugin cookie theft
exploit/multi/http/wp_litespeed_cookie_theft
Exploit-DB 1
- Litespeed Cache 6.5.0.1 - Authentication Bypass EDB-52099 · webapps · Mar 28, 2025
GitHub 4 repositories
-
absholi7ly/CVE-2024-44000-LiteSpeed-Cache ★ 16 · Sep 6, 2024
CVE-2024-44000 is a vulnerability in the LiteSpeed Cache plugin, a popular WordPress plugin. This vulnerability affects session management in LiteSpeed Cache, allowing attackers to gain unauthorized …
-
geniuszly/CVE-2024-44000 ★ 5 · Oct 10, 2024
is a PoC tool designed to exploit insecurely exposed debug logs from WordPress sites and extract session cookies
-
ifqygazhar/CVE-2024-44000-LiteSpeed-Cache ★ 3 · Sep 16, 2024
CVE-2024-44000-LiteSpeed-Cache
-
gbrsh/CVE-2024-44000 ★ 0 · Sep 6, 2024
LiteSpeed Unauthorized Account Takeover
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- LiteSpeed Cache <= 6.4.1 - Sensitive Information Exposure http/cves/2024/CVE-2024-44000.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.