Litespeedtech Litespeed Cache — known CVE vulnerabilities

Every CVE whose affected-product data names Litespeedtech Litespeed Cache, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (15)

• CVE-2024-28000 — CVSS 9.8 (critical): Incorrect Privilege Assignment vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache.This issue affects LiteSpeed Cache…
• CVE-2024-44000 — CVSS 9.8 (critical): Insufficiently Protected Credentials vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache allows Authentication…
• CVE-2024-47637 — CVSS 8.8 (high): Relative Path Traversal vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache allows Path Traversal.This issue affects…
• CVE-2023-40000 — CVSS 8.3 (high): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LiteSpeed Technologies LiteSpeed…
• CVE-2023-45000 — CVSS 8.2 (high): Missing Authorization vulnerability in LiteSpeed Technologies LiteSpeed Cache.This issue affects LiteSpeed Cache: from n/a through 5.7.
• CVE-2024-50550 — CVSS 8.1 (high): Incorrect Privilege Assignment vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache allows Privilege Escalation.This…
• CVE-2024-47374 — CVSS 7.1 (high): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LiteSpeed Technologies LiteSpeed…
• CVE-2024-47373 — CVSS 6.5 (medium): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LiteSpeed Technologies LiteSpeed…
• CVE-2023-4372 — CVSS 6.4 (medium): The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'esi' shortcode in versions up to, and…
• CVE-2020-29172 — CVSS 6.1 (medium): A cross-site scripting (XSS) vulnerability in the LiteSpeed Cache plugin before 3.6.1 for WordPress can be exploited via the Server IP…
• CVE-2021-24964 — CVSS 6.1 (medium): The LiteSpeed Cache WordPress plugin before 4.4.4 does not properly verify that requests are coming from QUIC.cloud servers, allowing…
• CVE-2024-3246 — CVSS 6.1 (medium): The LiteSpeed Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.2.0.1. This is…
• CVE-2024-9169 — CVSS 5.5 (medium): The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via plugin debug settings in all versions up to, and…
• CVE-2022-46800 — CVSS 5.4 (medium): Cross-Site Request Forgery (CSRF) vulnerability in LiteSpeed Technologies LiteSpeed Cache plugin <= 5.3 versions.
• CVE-2021-24963 — CVSS 4.8 (medium): The LiteSpeed Cache WordPress plugin before 4.4.4 does not escape the qc_res parameter before outputting it back in the JS code of an admin…