Medium · 6.4 CVE-2025-47437 EUVD-2025-27442GHSA-wj3g-88qg-cwfg

WordPress LiteSpeed Cache plugin <= 7.0.1 - Server Side Request Forgery (SSRF) vulnerability

Published Sep 9, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: LiteSpeed Technologies Product: LiteSpeed Cache

Description

Server-Side Request Forgery (SSRF) vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache.This issue affects LiteSpeed Cache: from n/a through <= 7.0.1.

Affected products

Vendor	Product	Affected	Fixed
LiteSpeed Technologies	LiteSpeed Cache	≤ 7.0.1	—

References

https://patchstack.com/database/Wordpress/Plugin/litespeed-cache/vulnerability/wordpress-litespeed-cache-plugin-7-0-1-server-side-request-forgery-ssrf-vulnerability?_s_id=cve vdb-entry