Lucene search
+L

306 matches found

CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•34 views

WordPress plugin LiteSpeed Cache č·Øē«™č„šęœ¬ę¼ę“ž

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

7.2CVSS5.8AI score0.00438EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/05/27 12:00 a.m.•58 views

PT-2026-43546

The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the /wp-json/litespeed/v1/notify ccss and /wp-json/litespeed/v1/notify ucss REST API endpoints in all versions up to, and including, 7.7. These endpoints accept CSS content from QUIC.cloud callback...

7.2CVSS5.8AI score0.00438EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/27 12:00 a.m.•10 views

CVE-2026-3375: Improper Neutralization of Input During Web Page Generation

The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the /wp-json/litespeed/v1/notifyccss and /wp-json/litespeed/v1/notifyucss REST API endpoints in all versions up to, and including, 7.7. These endpoints accept CSS content from QUIC.cloud callback notificatio...

7.2CVSS5.7AI score0.00438EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/02/21 7:29 p.m.•20 views

CVE-2024-51915

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache allows Stored XSS.This issue affects LiteSpeed Cache: from n/a through = 6.5.2...

6.5CVSS5.8AI score0.00251EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/20 4:22 p.m.•23 views

CVE-2024-51915

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache allows Stored XSS.This issue affects LiteSpeed Cache: from n/a through = 6.5.2...

6.5CVSS0.00251EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/02/20 3:46 p.m.•13 views

CVE-2024-51915 WordPress LiteSpeed Cache plugin <= 6.5.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache allows Stored XSS.This issue affects LiteSpeed Cache: from n/a through = 6.5.2...

6.5CVSS5.8AI score0.00251EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/02/20 3:46 p.m.•42 views

CVE-2024-51915 WordPress LiteSpeed Cache plugin <= 6.5.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache allows Stored XSS.This issue affects LiteSpeed Cache: from n/a through = 6.5.2...

6.5CVSS0.00251EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/02/20 12:00 a.m.•24 views

WordPress plugin LiteSpeed Cache č·Øē«™č„šęœ¬ę¼ę“ž

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

6.5CVSS5.7AI score0.00251EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/02/20 12:00 a.m.•29 views

PT-2026-21029

Name of the Vulnerable Software and Affected Versions LiteSpeed Cache versions through 6.5.2 Description The software contains a flaw related to improper input handling during web page generation, which allows for Stored Cross-site Scripting XSS. This means that malicious scripts can be injected...

5.2AI score0.00251EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/20 12:00 a.m.•5 views

CVE-2024-51915: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache allows Stored XSS.This issue affects LiteSpeed Cache: from n/a through = 6.5.2...

6.5CVSS5.8AI score0.00251EPSS
SaveExploits0References1
Packet Storm
Packet Storm
•added 2025/12/24 12:00 a.m.•270 views

šŸ“„ Litespeed Cache 6.4.0.1 Privilege Escalation

WordPress Litespeed Cache plugin version 6.4.0.1 allows attackers to brute-force authentication hashes and create administrative users without any initial credentials...

9.8CVSS7.3AI score0.68266EPSS
SaveExploits8
RedhatCVE
RedhatCVE
•added 2025/10/30 9:51 a.m.•18 views

CVE-2025-12450

The LiteSpeed Cache plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URLs in all versions up to, and including, 7.5.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages...

6.1CVSS5.6AI score0.00375EPSS
SaveExploits0References1
NVD
NVD
•added 2025/10/29 10:15 a.m.•19 views

CVE-2025-12450

The LiteSpeed Cache plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URLs in all versions up to, and including, 7.5.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages...

6.1CVSS0.00375EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/10/29 9:27 a.m.•34 views

CVE-2025-12450 LiteSpeed Cache <= 7.5.0.1 - Reflected Cross-Site Scripting

The LiteSpeed Cache plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URLs in all versions up to, and including, 7.5.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages...

6.1CVSS0.00375EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/10/29 9:27 a.m.•7 views

CVE-2025-12450 LiteSpeed Cache <= 7.5.0.1 - Reflected Cross-Site Scripting

The LiteSpeed Cache plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URLs in all versions up to, and including, 7.5.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages...

6.1CVSS8.3AI score0.00375EPSS
SaveExploits0References2
CVE
CVE
•added 2025/10/29 9:27 a.m.•50 views

CVE-2025-12450

CVE-2025-12450 affects the WordPress LiteSpeed Cache plugin. The vulnerability is a Reflected Cross-Site Scripting via URLs in all versions up to 7.5.0.1, caused by insufficient input sanitization and output escaping. It could allow unauthenticated attackers to inject script into pages that execu...

6.1CVSS8.3AI score0.00375EPSS
SaveIn wildExploits0References2
OSV
OSV
•added 2025/10/29 9:27 a.m.•11 views

CVE-2025-12450 LiteSpeed Cache <= 7.5.0.1 - Reflected Cross-Site Scripting

The LiteSpeed Cache plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URLs in all versions up to, and including, 7.5.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages...

6.1CVSS7.5AI score
SaveExploits0References4
Patchstack
Patchstack
•added 2025/10/29 6:15 a.m.•22 views

WordPress LiteSpeed Cache plugin <= 7.5.0.1 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Nicholas Giemsa in WordPress Plugin LiteSpeed Cache versions = 7.5.0.1...

6.1CVSS7.9AI score0.00375EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2025/10/29 12:00 a.m.•21 views

PT-2025-44269

Name of the Vulnerable Software and Affected Versions LiteSpeed Cache plugin for WordPress versions up to and including 7.5.0.1 Description The LiteSpeed Cache plugin for WordPress is susceptible to Reflected Cross-Site Scripting through URLs. This is caused by inadequate input sanitization and...

6.1CVSS7.5AI score0.00375EPSS
SaveExploits0References11
CNNVD
CNNVD
•added 2025/10/29 12:00 a.m.•17 views

WordPress plugin LiteSpeed Cache č·Øē«™č„šęœ¬ę¼ę“ž

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripti...

6.1CVSS8.2AI score0.00375EPSS
SaveExploits0References3
Rows per page
Query Builder