Advisories · Technology

LiteSpeed Technologies LiteSpeed Cache.

Every CVE that names LiteSpeed Technologies LiteSpeed Cache among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-84761 CVE record

CVSS 7.2 High

WordPress LiteSpeed Cache plugin <= 7.9 - Server Side Request Forgery (SSRF) vulnerability
- LiteSpeed Technologies LiteSpeed Cache
- Server-side request forgery (SSRF)
Not analysed yet 3 Sept 2026
CVE-2024-51915 CVE record

CVSS 6.5 Medium

WordPress LiteSpeed Cache plugin <= 6.5.2 - Cross Site Scripting (XSS) vulnerability
- LiteSpeed Technologies LiteSpeed Cache
- Cross-site scripting (XSS)
Not analysed yet 20 Feb 2026
CVE-2025-47437 CVE record

CVSS 6.4 Medium

WordPress LiteSpeed Cache plugin <= 7.0.1 - Server Side Request Forgery (SSRF) vulnerability
- LiteSpeed Technologies LiteSpeed Cache
- Server-side request forgery (SSRF)
Not analysed yet 9 Sept 2025
CVE-2024-50550 CVE record

CVSS 8.1 High

WordPress LiteSpeed Cache plugin <= 6.5.1 - Privilege Escalation vulnerability
- LiteSpeed Technologies LiteSpeed Cache
- Privilege escalation
Not analysed yet 29 Oct 2024
CVE-2024-44000 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

WordPress LiteSpeed Cache plugin < 6.5.0.1 - Unauthenticated Account Takeover via Cookie Leak vulnerability
- LiteSpeed Technologies LiteSpeed Cache
- Hard-coded credentials
Not analysed yet 20 Oct 2024
CVE-2024-47637 CVE record

CVSS 8.8 High

WordPress LiteSpeed Cache plugin <= 6.4.1 - Path Traversal vulnerability
- LiteSpeed Technologies LiteSpeed Cache
- Path traversal
Not analysed yet 16 Oct 2024
CVE-2024-47373 CVE record

CVSS 6.5 Medium

WordPress LiteSpeed Cache plugin <= 6.5.0.2 - Cross Site Scripting (XSS) vulnerability
- LiteSpeed Technologies LiteSpeed Cache
- Cross-site scripting (XSS)
Not analysed yet 5 Oct 2024
CVE-2024-47374 CVE record

CVSS 7.1 High

WordPress LiteSpeed Cache plugin <= 6.5.0.2 - Cross Site Scripting (XSS) vulnerability
- LiteSpeed Technologies LiteSpeed Cache
- Cross-site scripting (XSS)
Not analysed yet 5 Oct 2024
CVE-2024-28000 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

WordPress LiteSpeed Cache plugin <= 6.3.0.1 - Unauthenticated Privilege Escalation vulnerability
- LiteSpeed Technologies LiteSpeed Cache
- Privilege escalation
Not analysed yet 21 Aug 2024
CVE-2023-45000 CVE record

CVSS 8.2 High

WordPress LiteSpeed Cache plugin <= 5.7 - Unauthenticated Broken Access Control on API vulnerability
- LiteSpeed Technologies LiteSpeed Cache
- Broken access control
Not analysed yet 16 Apr 2024
CVE-2023-40000 CVE record

CVSS 8.3 HighCritical · CVSS 7+ and EPSS

WordPress LiteSpeed Cache plugin <= 5.7 - Unauthenticated Site Wide Stored XSS vulnerability
- LiteSpeed Technologies LiteSpeed Cache
- Cross-site scripting (XSS)
Not analysed yet 16 Apr 2024
CVE-2022-46800 CVE record

CVSS 5.4 Medium

WordPress LiteSpeed Cache Plugin <= 5.3 is vulnerable to Cross Site Request Forgery (CSRF)
- LiteSpeed Technologies LiteSpeed Cache
- Cross-site request forgery (CSRF)
Not analysed yet 25 May 2023