Lucene search
K

231 matches found

Packet Storm
Packet Storm
added 2025/12/24 12:0 a.m.238 views

📄 Litespeed Cache 6.4.0.1 Privilege Escalation

WordPress Litespeed Cache plugin version 6.4.0.1 allows attackers to brute-force authentication hashes and create administrative users without any initial credentials...

9.8CVSS7.3AI score0.68266EPSS
Exploits8
RedhatCVE
RedhatCVE
added 2025/10/30 9:51 a.m.4 views

CVE-2025-12450

The LiteSpeed Cache plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URLs in all versions up to, and including, 7.5.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages...

6.1CVSS5.6AI score0.00382EPSS
Exploits0References1
OSV
OSV
added 2025/10/29 10:15 a.m.4 views

CVE-2025-12450

The LiteSpeed Cache plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URLs in all versions up to, and including, 7.5.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages...

6.1CVSS5.7AI score
Exploits0References2
NVD
NVD
added 2025/10/29 10:15 a.m.5 views

CVE-2025-12450

The LiteSpeed Cache plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URLs in all versions up to, and including, 7.5.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages...

6.1CVSS0.00382EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/10/29 9:27 a.m.6 views

CVE-2025-12450 LiteSpeed Cache <= 7.5.0.1 - Reflected Cross-Site Scripting

The LiteSpeed Cache plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URLs in all versions up to, and including, 7.5.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages...

6.1CVSS5.3AI score0.00382EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/10/29 9:27 a.m.9 views

CVE-2025-12450 LiteSpeed Cache <= 7.5.0.1 - Reflected Cross-Site Scripting

The LiteSpeed Cache plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URLs in all versions up to, and including, 7.5.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages...

6.1CVSS0.00382EPSS
Exploits0References2
CVE
CVE
added 2025/10/29 9:27 a.m.21 views

CVE-2025-12450

CVE-2025-12450 affects the WordPress LiteSpeed Cache plugin. The vulnerability is a Reflected Cross-Site Scripting via URLs in all versions up to 7.5.0.1, caused by insufficient input sanitization and output escaping. It could allow unauthenticated attackers to inject script into pages that execu...

6.1CVSS5.3AI score0.00382EPSS
In wildExploits0References2
Patchstack
Patchstack
added 2025/10/29 6:15 a.m.7 views

WordPress LiteSpeed Cache plugin <= 7.5.0.1 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Nicholas Giemsa in WordPress Plugin LiteSpeed Cache versions = 7.5.0.1...

6.1CVSS7.9AI score0.00382EPSS
Exploits0References1Affected Software1
VulnCheck KEV
VulnCheck KEV
added 2025/10/29 12:0 a.m.5 views

VulnCheck KEV: CVE-2025-12450

The LiteSpeed Cache plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URLs in all versions up to, and including, 7.5.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages...

6.1CVSS5.9AI score0.00382EPSS
In wildExploits0References2
Positive Technologies
Positive Technologies
added 2025/10/29 12:0 a.m.5 views

PT-2025-44269

Name of the Vulnerable Software and Affected Versions LiteSpeed Cache plugin for WordPress versions up to and including 7.5.0.1 Description The LiteSpeed Cache plugin for WordPress is susceptible to Reflected Cross-Site Scripting through URLs. This is caused by inadequate input sanitization and...

6.1CVSS7.5AI score0.00382EPSS
Exploits0References11
CNNVD
CNNVD
added 2025/10/29 12:0 a.m.6 views

WordPress plugin LiteSpeed Cache 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripti...

6.1CVSS8.2AI score0.00382EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2020-21552

Malware in sbrugna...

6.1CVSS6.3AI score0.0093EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2021-11875

Malware in sbrugna...

4.8CVSS4.9AI score0.00654EPSS
Exploits2References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2024-44947

Malicious code in bioql PyPI...

9.8CVSS9.1AI score0.00913EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.8 views

EUVD-2024-42409

Malicious code in bioql PyPI...

6.5CVSS6.5AI score0.00241EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2022-49582

Malicious code in bioql PyPI...

8.8CVSS8.4AI score0.00264EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2025-27442

Malicious code in bioql PyPI...

6.4CVSS8.7AI score0.00235EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2024-42410

Malicious code in bioql PyPI...

7.1CVSS6.7AI score0.0141EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2024-49769

Malicious code in bioql PyPI...

5.5CVSS6.5AI score0.00265EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2023-54236

Malicious code in bioql PyPI...

6.4CVSS6.5AI score0.19684EPSS
Exploits2References4
Rows per page
Query Builder