WordPress Plugin LiteSpeed Cache Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

WordPress LiteSpeed Cache Plugin <= 5.6 is vulnerable to Cross Site Scripting (XSS)

Software LiteSpeed Cache Type Plugin Vulnerable versions = 5.6 Fixed in 5.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-4372 Patch priority Low CVSS severity Low 6.5 Developer Hai Zheng / Lite Speed Cache PSID 74d771679daa Credits Lana Codes...

PT-2023-8723

Name of the Vulnerable Software and Affected Versions LiteSpeed Cache versions prior to 5.7.0.1 Description The issue is related to improper neutralization of input during web page generation, also known as cross-site scripting XSS. This vulnerability allows stored XSS attacks, which can lead to...

WordPress LiteSpeed Cache Plugin < 5.7 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:litespeedtech:litespeedcache"; if description...

LiteSpeed Cache < 5.7 - Contributor+ Stored XSS

Description The plugin does not escape the cache attribute of its esi shortcode before outputting it back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

WordPress LiteSpeed Cache 5.6 Cross Site Scripting Vulnerability

Vulnerability Summary from Wordfence Intelligence Description: LiteSpeed Cache = 5.6 – Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode Affected Plugin: LiteSpeed Cache Plugin Slug: litespeed-cache Affected Versions: = 5.6 CVE ID: CVE-2023-4372 CVSS Score: 6.4 Medium CVSS...

WordPress LiteSpeed Cache 5.6 Cross Site Scripting

Vulnerability Summary from Wordfence Intelligence Description: LiteSpeed Cache = 5.6 – Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode Affected Plugin: LiteSpeed Cache Plugin Slug: litespeed-cache Affected Versions: = 5.6 CVE ID: CVE-2023-4372 CVSS Score: 6.4 Medium CVSS...

4 Million WordPress Sites affected by Stored Cross-Site Scripting Vulnerability in LiteSpeed Cache Plugin

On August 14, 2023, our Wordfence Threat Intelligence team identified and began the responsible disclosure process for a stored Cross-Site Scripting XSS vulnerability in LiteSpeed Cache plugin, which is actively installed on more than 4,000,000 WordPress websites, making it the most popular cache...

PT-2023-28939 · WordPress · Litespeed Cache

Name of the Vulnerable Software and Affected Versions: LiteSpeed Cache plugin for WordPress versions up to, and including, 5.6 Description: The issue is related to Stored Cross-Site Scripting via the esi shortcode due to insufficient input sanitization and output escaping on user-supplied...

CVE-2023-40518

LiteSpeed OpenLiteSpeed before 1.7.18 does not strictly validate HTTP request headers...

Design/Logic Flaw

LiteSpeed OpenLiteSpeed before 1.7.18 does not strictly validate HTTP request headers...

CVE-2023-40518

LiteSpeed OpenLiteSpeed before 1.7.18 does not strictly validate HTTP request headers...

CVE-2023-40518

LiteSpeed OpenLiteSpeed before 1.7.18 does not strictly validate HTTP request headers...

CVE-2023-40518

LiteSpeed OpenLiteSpeed

CVE-2023-40518

LiteSpeed OpenLiteSpeed before 1.7.18 does not strictly validate HTTP request headers...

WordPress LiteSpeed Cache Plugin < 5.3.1 CSRF Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:litespeedtech:litespeedcache"; if description...

CVE-2022-46800

Cross-Site Request Forgery CSRF vulnerability in LiteSpeed Technologies LiteSpeed Cache plugin = 5.3 versions...

CVE-2022-46800

Cross-Site Request Forgery CSRF vulnerability in LiteSpeed Technologies LiteSpeed Cache plugin = 5.3 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in LiteSpeed Technologies LiteSpeed Cache plugin = 5.3 versions...

CVE-2022-46800

CVE-2022-46800 affects the WordPress LiteSpeed Cache plugin up to version 5.3. The issue is a Cross-Site Request Forgery (CSRF) vulnerability in the plugin, as described in multiple sources (NVD/Red Hat/OpenVAS overlaps). The exact root cause is not explicitly detailed in the provided documents b...