sales@hackhalt.com
Free Download

Live Vulnerability Intelligence

Threat Database

Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.

Total28
Critical2
High11
Medium14
Reset
Showing 1-20 of 28 records
Threat Entry Updated 2026-11-05

Litespeed Cache - Security Vulnerability (CVE-2026-93389)

The LiteSpeed Cache plugin for WordPress is vulnerable to unauthenticated disclosure of sensitive WooCommerce customer data in all versions up to, and including, 7.9.1 With Cache REST enabled (the shipped default cache-rest=1), LiteSpeed stores WooCommerce Store API GET responses (/wc/store/v1/cart and /wc/store/v1/checkout) as PUBLIC cache objects and does not vary the cache on the Cart-Token or WooCommerce session. A shopper's personalized cart/checkout response is therefore served to any later, cookie-less and token-less client as an LSCache HIT. This makes it possible for unauthenticated attackers to read another shopper's billing and…

PLUGIN Litespeed Cache

CVE-2026-93389

HIGH CVSS 8.2 2026-11-05
Open Full Technical Breakdown
Threat Entry Updated 2026-10-23

LiteSpeed Cache - Security Vulnerability (CVE-2026-113500)

The LiteSpeed Cache WordPress plugin before 7.9.2 does not limit one of its HTML optimization routines to stylesheet content, so it can delete the markup that closes an attribute in the rendered page, and combined with unescaped comment author output this allows unauthenticated users whose comments are published to inject event-handler attributes that run JavaScript in the browser of any visitor, including a logged-in administrator, viewing front-end pages while the optimization is enabled.

PLUGIN LiteSpeed Cache

CVE-2026-113500

HIGH CVSS 7.5 2026-10-23
Open Full Technical Breakdown
Threat Entry Updated 2026-10-23

LiteSpeed Cache - Security Vulnerability (CVE-2026-113499)

The LiteSpeed Cache WordPress plugin before 7.9.2 does not restrict one of its HTML rewriting routines to stylesheet content, so it removes a quote that terminates an attribute in the rendered page, and combined with unescaped comment author output this allows unauthenticated users whose comment is published to inject attributes that execute JavaScript in the browser of any visitor, including a logged-in administrator, who views front-end pages while the affected option is enabled.

PLUGIN LiteSpeed Cache

CVE-2026-113499

HIGH CVSS 7.5 2026-10-23
Open Full Technical Breakdown
Threat Entry Updated 2026-10-23

LiteSpeed Cache - Security Vulnerability (CVE-2026-113501)

The LiteSpeed Cache WordPress plugin before 7.9.2 does not perform a capability check on its admin-notice dismissal handler, and the nonce it relies on is not bound to the specific notice being dismissed, so on sites in certain configurations a low-privileged authenticated user (Subscriber) can dismiss administrative notices the LiteSpeed Cache WordPress plugin before 7.9.2 marks as non-dismissible, including a warning that sensitive files may be publicly accessible.

PLUGIN LiteSpeed Cache

CVE-2026-113501

LOW CVSS 3.1 2026-10-23
Open Full Technical Breakdown
Threat Entry Updated 2026-09-21

Litespeed Cache - Security Vulnerability (CVE-2026-76579)

The LiteSpeed Cache plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'esi' parameter in all versions up to, and including, 7.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Exploitation requires that the attacker supply a validly signed 'esi' value in the GET query string while submitting a separate attacker-controlled 'esi' payload as a…

PLUGIN Litespeed Cache

CVE-2026-76579

MEDIUM CVSS 4.7 2026-09-19
Open Full Technical Breakdown
Threat Entry Updated 2026-08-29

Litespeed Cache - Cross-Site Scripting (XSS) (CVE-2026-3129)

The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via crafted `` tag attributes in all versions up to, and including, 7.7. This is due to a flawed regular expression that is used to strip `width` and `height` attributes from images when the "Lazy Load Images" and "Add Missing Sizes" features are enabled. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that execute whenever a user accesses an injected page.

PLUGIN Litespeed Cache

CVE-2026-3129

MEDIUM CVSS 6.4 2026-08-28
Open Full Technical Breakdown
Threat Entry Updated 2026-08-28

Litespeed Cache - Cross-Site Scripting (XSS) (CVE-2026-18978)

The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all versions up to, and including, 7.8.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. A comment payload crafted exclusively from decimal numeric character references (e.g. ", <, >) placed inside an allowed element such as <code> bypasses WordPress's wp_kses sanitization, as kses does not treat a data-settings="..." substring within…

PLUGIN Litespeed Cache

CVE-2026-18978

HIGH CVSS 7.2 2026-08-28
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

Litespeed Cache - Broken Access Control (CVE-2026-3375)

The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the /wp-json/litespeed/v1/notify_ccss and /wp-json/litespeed/v1/notify_ucss REST API endpoints in all versions up to, and including, 7.7. These endpoints accept CSS content from QUIC.cloud callback notifications and store it to disk without sanitization. The stored content is later rendered inline frontend page loads without output escaping. The access control protecting these endpoints is IP-based validation that can potentially be bypassed when the WordPress site is deployed behind a reverse proxy, load balancer, or CDN with certain configurations. This makes…

PLUGIN Litespeed Cache

CVE-2026-3375

HIGH CVSS 7.2 2026-05-27
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

LiteSpeed Cache - Cross-Site Scripting (XSS) (CVE-2025-12450)

The LiteSpeed Cache plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URLs in all versions up to, and including, 7.5.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.

PLUGIN LiteSpeed Cache

CVE-2025-12450

MEDIUM CVSS 6.1 2025-10-29
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

Litespeed Cache - Cross-Site Scripting (XSS) (CVE-2024-9169)

The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via plugin debug settings in all versions up to, and including, 6.4.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.

PLUGIN Litespeed Cache

CVE-2024-9169

MEDIUM CVSS 5.5 2024-09-25
Open Full Technical Breakdown

WordPress security that blocks attacks before they land.

sales@hackhalt.com

Product

Resources

Company

© Hack Halt Inc. All rights reserved.