CVE-2024-28000-Exploit-Lab

CVE-2024-28000 — Laboratorio LiteSpeed Cache de WordPress Reproducción autorizada en laboratorio local de CVE-2024-28000 , un problema de escalada de privilegios no autenticada que afecta a versiones vulnerables del plugin LiteSpeed Cache de WordPress. Alcance: Este repositorio documenta pruebas...

CVE-2024-28000

LiteSpeed Cache 权限提升 PoC - CVE-2024-28000 🎤 自述文件翻译 English فارسی 📸 截图 💎 介绍 该仓库包含针对 LiteSpeed Cache WordPress 插件中发现的一个关键权限提升漏洞的概念验证（PoC）。该漏洞编号为 CVE-2024-28000，允许未经授权的用户通过利用弱安全哈希获得 WordPress 站点的管理员级别访问权限。 💀 漏洞概述 LiteSpeed Cache 插件的用户模拟功能由一个弱且可预测的安全哈希保护。此 PoC 演示了攻击者如何暴力破解该安全哈希，从而在目标 WordPress...

CVE-2024-28000

CVE-2024-28000 PoC This repository contains tools for exploiting the CVE-2024-28000 vulnerability affecting WordPress sites using the LiteSpeed Cache plugin. The included scripts automate the detection of exposed debug.log files and the exploitation of a privilege escalation vulnerability that...

CVE-2024-44000-LiteSpeed-Cache

Poc LiteSpeed Cache CVE-2024-44000 漏洞利用 CVE-2024-44000 是 LiteSpeed Cache 插件（一个流行的 WordPress 插件）中的一个漏洞。该漏洞影响 LiteSpeed Cache 的会话管理，允许攻击者未经授权访问敏感数据。 脚本按以下步骤工作： 1. 从调试日志中提取 Cookie ： 脚本发送 GET 请求从服务器获取 debug.log 文件 wp-content/debug.log。 使用正则表达式从文件内容中提取 cookie。 2. 提取会话 Cookie ： 它过滤提取到的 cookie，找到匹配以下模式的...

LiteSpeed Cache <= 6.5.0.2 - Stored XSS

LiteSpeed Technologies LiteSpeed Cache versions up to 6.5.0.2 contain a stored cross-site scripting caused by improper input neutralization during web page generation, letting attackers execute malicious scripts in victim browsers, exploit requires storing malicious input. id: CVE-2024-47374 info...

CVE-2023-40000

CVE-2023-40000 LiteSpeed-Cache-Plugin für WordPress, das nicht authentifizierten Benutzern ermöglichen könnte, ihre Privilegien auszuweiten Wie funktioniert diese Erkennungsmethode? Diese Vorlage untersucht den folgenden Pfad: /wp-content/plugins/litespeed-cache/readme.txt Basierend auf dem...

LiteSpeed Cache <= 5.7 - Unauthenticated Stored XSS

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LiteSpeed Technologies LiteSpeed Cache allows Stored XSS.This issue affects LiteSpeed Cache- from n/a through 5.7. id: CVE-2023-40000 info: name: LiteSpeed Cache = 5.7 - Unauthenticated Stored XSS...

LiteSpeed Cache <= 6.4.1 - Sensitive Information Exposure

The LiteSpeed Cache plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 6.4.1 through the debug.log file that is publicly exposed. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the...

WordPress LiteSpeed Cache - Unauthenticated Privilege Escalation to Admin

Incorrect Privilege Assignment vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache allows Privilege Escalation.This issue affects LiteSpeed Cache: from 1.9 through 6.3.0.1. id: CVE-2024-28000 info: name: WordPress LiteSpeed Cache - Unauthenticated Privilege Escalation to Admin...

CVE-2024-44000-LiteSpeed-Cache

CVE-2024-44000-LiteSpeed-Cache CVE-2024-44000 è una vulnerabilità nel plugin LiteSpeed Cache, un popolare plugin WordPress. Questa vulnerabilità riguarda la gestione delle sessioni in LiteSpeed Cache, consentendo agli aggressori di ottenere accesso non autorizzato a dati sensibili. Anteprima Come...

CVE-2024-28000

CVE-2024-28000 - LiteSpeed Cache Privilege Escalation PoC !WARNING This repository is intended for educational and research purposes only. Use the provided PoC exclusively on systems you own or have explicit permission to test. Unauthorized access , exploitation, or misuse of any material in this...

CVE-2024-28000

CVE-2024-28000 CVE-2024-28000 litespeed-cache =6.3 के लिए शोषण जो व्यवस्थापक खाता बनाने के साथ विशेषाधिकार वृद्धि की अनुमति देता है निर्माण root@kitploit: git clone https://github.com/JohnDoeAnonITA/CVE-2024-28000 cd CVE-2024-28000 go build . अस्वीकरण यह PoC केवल शैक्षिक उद्देश्यों के लिए है।...

WordPress LiteSpeed Cache plugin <= 7.8.1 - Unauthenticated Stored Cross-Site Scripting via Comment Content vulnerability

Unauthenticated Stored Cross-Site Scripting via Comment Content vulnerability discovered by Jack Taylor in WordPress Plugin LiteSpeed Cache versions = 7.8.1...

CVE-2026-3129

The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via crafted tag attributes in all versions up to, and including, 7.7. This is due to a flawed regular expression that is used to strip width and height attributes from images when the "Lazy Load Images" and "Add...

CVE-2026-18978

The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all versions up to, and including, 7.8.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in...

CVE-2026-3129 LiteSpeed Cache <= 7.7 - Authenticated (Author+) Stored Cross-Site Scripting via img Tag Attributes

The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via crafted tag attributes in all versions up to, and including, 7.7. This is due to a flawed regular expression that is used to strip width and height attributes from images when the "Lazy Load Images" and "Add...

CVE-2026-3129 LiteSpeed Cache <= 7.7 - Authenticated (Author+) Stored Cross-Site Scripting via img Tag Attributes

The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via crafted tag attributes in all versions up to, and including, 7.7. This is due to a flawed regular expression that is used to strip width and height attributes from images when the "Lazy Load Images" and "Add...

CVE-2026-3129

The LiteSpeed Cache plugin for WordPress (all versions up to and including 7.7 ) is vulnerable to Stored Cross-Site Scripting via crafted tag attributes. The root cause is a flawed regular expression used to strip width and height attributes from images when the "Lazy Load Images" and "Add Missi...

EUVD-2026-67407

The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via crafted tag attributes in all versions up to, and including, 7.7. This is due to a flawed regular expression that is used to strip width and height attributes from images when the "Lazy Load Images" and "Add...

EUVD-2026-67404

The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all versions up to, and including, 7.8.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in...