Critical Flaw in WordPress LiteSpeed Cache Plugin Allows Hackers Admin Access

🗓️ 22 Aug 2024 05:02:00Reported by The Hacker NewsType

thn🔗 thehackernews.com👁 68 Views

Critical Flaw in WordPress LiteSpeed Cache Plugin - Admin access vulnerabilit

Reporter	Title	Published	Views	Family All 53
GithubExploit	Exploit for Cross-site Scripting in Litespeedtech Litespeed_Cache	28 Feb 202419:36	–	githubexploit
GithubExploit	Exploit for Incorrect Privilege Assignment in Litespeedtech Litespeed_Cache	25 Aug 202416:57	–	githubexploit
GithubExploit	Exploit for Incorrect Privilege Assignment in Litespeedtech Litespeed_Cache	27 Aug 202407:20	–	githubexploit
GithubExploit	Exploit for Cross-site Scripting in Litespeedtech Litespeed_Cache	13 May 202415:25	–	githubexploit
GithubExploit	Exploit for Incorrect Privilege Assignment in Litespeedtech Litespeed_Cache	10 Sep 202408:16	–	githubexploit
GithubExploit	Exploit for Incorrect Privilege Assignment in Litespeedtech Litespeed_Cache	24 Aug 202405:12	–	githubexploit
GithubExploit	Exploit for Incorrect Privilege Assignment in Litespeedtech Litespeed_Cache	9 Sep 202406:19	–	githubexploit
GithubExploit	Exploit for Cross-site Scripting in Litespeedtech Litespeed_Cache	12 May 202406:13	–	githubexploit
BDU FSTEC	The vulnerability of the update_cdn_status() function in the LiteSpeed Cache plugin for WordPress (LSCWP), a content management system for WordPress websites, allows a hacker to gain unauthorized access to protected information or enhance their privileges.	4 Mar 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the LiteSpeed Cache plugin for WordPress (LSCWP), a content management system for WordPress websites, relates to improper privilege assignment, allowing attackers to escalate their privileges.	16 Sep 202400:00	–	bdu_fstec

23 Aug 2024 04:12Current

7.6High risk

Vulners AI Score7.6

CVSS 3.19.8

EPSS0.68266

SSVC

wordpress litespeed cache security flaw privilege escalation cve-2024-28000 patch vulnerability mitigation cybersecurity php method