CVE-2026-3375: Improper Neutralization of Input During Web Page Generation

The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the /wp-json/litespeed/v1/notifyccss and /wp-json/litespeed/v1/notifyucss REST API endpoints in all versions up to, and including, 7.7. These endpoints accept CSS content from QUIC.cloud callback notificatio...

PT-2020-17105

Name of the Vulnerable Software and Affected Versions LiteSpeed Cache plugin versions prior to 3.6.1 Description A cross-site scripting XSS issue exists in the LiteSpeed Cache plugin for WordPress, which can be exploited via the Server IP setting. Recommendations For versions prior to 3.6.1, upda...