CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

329 matches found

Vulnrichment•added 2026/05/27 7:45 a.m.•21 views

CVE-2026-3375 LiteSpeed Cache <= 7.7 - Unauthenticated Stored Cross-Site Scripting via QUIC.cloud CCSS/UCSS REST API Endpoints

The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the /wp-json/litespeed/v1/notifyccss and /wp-json/litespeed/v1/notifyucss REST API endpoints in all versions up to, and including, 7.7. These endpoints accept CSS content from QUIC.cloud callback notificatio...

7.2CVSS5.7AI score0.00438EPSS

SaveExploits0References8

CVE•added 2026/05/27 7:45 a.m.•179 views

CVE-2026-3375

CVE-2026-3375 affects the LiteSpeed Cache plugin for WordPress. A Stored Cross-Site Scripting flaw exists in the REST endpoints /wp-json/litespeed/v1/notify_ccss and /wp-json/litespeed/v1/notify_ucss, where CSS content from QUIC.cloud callback notifications is stored to disk without sanitization....

7.2CVSS5.7AI score0.00438EPSS

SaveExploits0References8

attackerkb•added 2026/05/27 7:45 a.m.•37 views

CVE-2026-3375

7.2CVSS5.8AI score0.00438EPSS

SaveExploits0References9

CNNVD•added 2026/05/27 12:00 a.m.•35 views

WordPress plugin LiteSpeed Cache has a cross-site scripting vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

7.2CVSS5.6AI score0.00438EPSS

SaveExploits0References8

Rapid7 Vulnerability Database (full)•added 2026/05/27 12:00 a.m.•13 views

CVE-2026-3375: Improper Neutralization of Input During Web Page Generation

7.2CVSS5.7AI score0.00438EPSS

SaveExploits0References2

Positive Technologies•added 2026/05/27 12:00 a.m.•61 views

PT-2026-43546

The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the /wp-json/litespeed/v1/notify ccss and /wp-json/litespeed/v1/notify ucss REST API endpoints in all versions up to, and including, 7.7. These endpoints accept CSS content from QUIC.cloud callback...

7.2CVSS5.8AI score0.00438EPSS

SaveExploits0References9

RedhatCVE•added 2026/02/21 7:29 p.m.•21 views

CVE-2024-51915

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache allows Stored XSS.This issue affects LiteSpeed Cache: from n/a through = 6.5.2...

6.5CVSS5.8AI score0.00252EPSS

SaveExploits0References1

NVD•added 2026/02/20 4:22 p.m.•25 views

CVE-2024-51915

6.5CVSS0.00252EPSS

SaveExploits0References1

Cvelist•added 2026/02/20 3:46 p.m.•42 views

CVE-2024-51915 WordPress LiteSpeed Cache plugin <= 6.5.2 - Cross Site Scripting (XSS) vulnerability

6.5CVSS0.00252EPSS

SaveExploits0References1

Vulnrichment•added 2026/02/20 3:46 p.m.•13 views

CVE-2024-51915 WordPress LiteSpeed Cache plugin <= 6.5.2 - Cross Site Scripting (XSS) vulnerability

6.5CVSS5.8AI score0.00252EPSS

SaveExploits0References1

CNNVD•added 2026/02/20 12:00 a.m.•26 views

WordPress plugin LiteSpeed Cache has a cross-site scripting vulnerability

6.5CVSS5.5AI score0.00252EPSS

SaveExploits0References1

Positive Technologies•added 2026/02/20 12:00 a.m.•29 views

PT-2026-21029

Name of the Vulnerable Software and Affected Versions LiteSpeed Cache versions through 6.5.2 Description The software contains a flaw related to improper input handling during web page generation, which allows for Stored Cross-site Scripting XSS. This means that malicious scripts can be injected...

5.2AI score0.00252EPSS

SaveExploits0References3

Rapid7 Vulnerability Database (full)•added 2026/02/20 12:00 a.m.•6 views

CVE-2024-51915: Improper Neutralization of Input During Web Page Generation

6.5CVSS5.8AI score0.00252EPSS

SaveExploits0References1

Packet Storm•added 2025/12/24 12:00 a.m.•271 views

📄 Litespeed Cache 6.4.0.1 Privilege Escalation

WordPress Litespeed Cache plugin version 6.4.0.1 allows attackers to brute-force authentication hashes and create administrative users without any initial credentials...

9.8CVSS8.9AI score0.68266EPSS

SaveExploits8

RedhatCVE•added 2025/10/30 9:51 a.m.•20 views

CVE-2025-12450

The LiteSpeed Cache plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URLs in all versions up to, and including, 7.5.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages...

6.1CVSS8.7AI score0.00375EPSS

SaveExploits0References1

NVD•added 2025/10/29 10:15 a.m.•21 views

CVE-2025-12450

6.1CVSS0.00375EPSS

SaveExploits0References2

Vulnrichment•added 2025/10/29 9:27 a.m.•7 views

CVE-2025-12450 LiteSpeed Cache <= 7.5.0.1 - Reflected Cross-Site Scripting

6.1CVSS8.3AI score0.00375EPSS

SaveExploits0References2

osv_cve•added 2025/10/29 9:27 a.m.•14 views

CVE-2025-12450 LiteSpeed Cache <= 7.5.0.1 - Reflected Cross-Site Scripting

6.1CVSS7.5AI score

SaveExploits0References4

Cvelist•added 2025/10/29 9:27 a.m.•36 views

CVE-2025-12450 LiteSpeed Cache <= 7.5.0.1 - Reflected Cross-Site Scripting

6.1CVSS0.00375EPSS

SaveExploits0References2

CVE•added 2025/10/29 9:27 a.m.•55 views

CVE-2025-12450

CVE-2025-12450 affects the WordPress LiteSpeed Cache plugin. The vulnerability is a Reflected Cross-Site Scripting via URLs in all versions up to 7.5.0.1, caused by insufficient input sanitization and output escaping. It could allow unauthenticated attackers to inject script into pages that execu...

6.1CVSS8.3AI score0.00375EPSS

SaveIn wildExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by