Skip to content
Noroxi

LiteSpeed Cache

litespeed-cache · plugin

Known security vulnerabilities for LiteSpeed Cache. Find out in seconds which version runs on your site with WP Lens.

19 known vulnerabilities

3 critical · 4 with public exploit code · latest Sep 19, 2026

Vulnerabilities

  • CVE-2024-50550

    WordPress LiteSpeed Cache plugin <= 6.5.1 - Privilege Escalation vulnerability

    Critical 9.8

  • CVE-2024-44000

    WordPress LiteSpeed Cache plugin < 6.5.0.1 - Unauthenticated Account Takeover via Cookie Leak vulnerability

    Critical 9.8

  • CVE-2024-28000

    WordPress LiteSpeed Cache plugin <= 6.3.0.1 - Unauthenticated Privilege Escalation vulnerability

    Critical 9.8

  • CVE-2024-47637

    WordPress LiteSpeed Cache plugin <= 6.4.1 - Path Traversal vulnerability

    High 8.8

  • CVE-2022-46800

    WordPress LiteSpeed Cache Plugin <= 5.3 is vulnerable to Cross Site Request Forgery (CSRF)

    High 8.8

  • CVE-2026-84761

    WordPress LiteSpeed Cache plugin <= 7.9 - Server Side Request Forgery (SSRF) vulnerability

    High 7.2

  • CVE-2026-18978

    LiteSpeed Cache <= 7.8.1 - Unauthenticated Stored Cross-Site Scripting via Comment Content

    High 7.2

  • CVE-2026-3375

    LiteSpeed Cache <= 7.7 - Unauthenticated Stored Cross-Site Scripting via QUIC.cloud CCSS/UCSS REST API Endpoints

    High 7.2

  • CVE-2024-51915

    WordPress LiteSpeed Cache plugin <= 6.5.2 - Cross Site Scripting (XSS) vulnerability

    Medium 6.5

  • CVE-2026-3129

    LiteSpeed Cache <= 7.7 - Authenticated (Author+) Stored Cross-Site Scripting via img Tag Attributes

    Medium 6.4

  • CVE-2025-47437

    WordPress LiteSpeed Cache plugin <= 7.0.1 - Server Side Request Forgery (SSRF) vulnerability

    Medium 6.4

  • CVE-2024-47374

    WordPress LiteSpeed Cache plugin <= 6.5.0.2 - Cross Site Scripting (XSS) vulnerability

    Medium 6.1

  • CVE-2023-40000

    WordPress LiteSpeed Cache plugin <= 5.7 - Unauthenticated Site Wide Stored XSS vulnerability

    Medium 6.1

  • CVE-2020-29172

    A cross-site scripting (XSS) vulnerability in the LiteSpeed Cache plugin before 3.6.1 for WordPress can be exploited via the Server IP setti

    Medium 6.1

  • CVE-2024-47373

    WordPress LiteSpeed Cache plugin <= 6.5.0.2 - Cross Site Scripting (XSS) vulnerability

    Medium 5.4

  • CVE-2024-3246

    LiteSpeed Cache <= 6.2.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting

    Medium 5.4

  • CVE-2023-4372

    LiteSpeed Cache <= 5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    Medium 5.4

  • CVE-2023-45000

    WordPress LiteSpeed Cache plugin <= 5.7 - Unauthenticated Broken Access Control on API vulnerability

    Medium 5.3

  • CVE-2026-76579

    LiteSpeed Cache <= 7.9 - Reflected Cross-Site Scripting via ESI 'esi' Parameter

    Medium 4.7

← Back to directory