CVE-2024-44000 WordPress LiteSpeed Cache plugin < 6.5.0.1 - Unauthenticated Account Takeover via Cookie Leak vulnerability

🗓️ 20 Oct 2024 11:22:26Reported by PatchstackType

WordPress LiteSpeed Cache plugin Unauthenticated Account Takeover vulnerabilit

Reporter	Title	Published	Views	Family All 21
Tenable Nessus	WordPress Plugin 'LiteSpeed Cache' < 6.5.0.1. Unauthenticated Account Takeover	11 Sep 202400:00	–	nessus
GithubExploit	Exploit for Insufficiently Protected Credentials in Litespeedtech Litespeed Cache	31 Oct 202411:03	–	githubexploit
GithubExploit	Exploit for Insufficiently Protected Credentials in Litespeedtech Litespeed Cache	6 Sep 202413:43	–	githubexploit
GithubExploit	Exploit for Insufficiently Protected Credentials in Litespeedtech Litespeed Cache	16 Sep 202414:13	–	githubexploit
GithubExploit	Exploit for Insufficiently Protected Credentials in Litespeedtech Litespeed Cache	10 Oct 202415:58	–	githubexploit
GithubExploit	Exploit for Insufficiently Protected Credentials in Litespeedtech Litespeed Cache	6 Sep 202403:38	–	githubexploit
GithubExploit	Exploit for Insufficiently Protected Credentials in Litespeedtech Litespeed Cache	6 Sep 202403:38	–	githubexploit
0day.today	WordPress LiteSpeed Cache Cookie Theft Exploit	18 Sep 202400:00	–	zdt
Metasploit	Wordpress LiteSpeed Cache plugin cookie theft	11 Sep 202422:23	–	metasploit
Packet Storm	WordPress LiteSpeed Cache Cookie Theft	17 Sep 202400:00	–	packetstorm

[
  {
    "cpes": [
      "cpe:2.3:a:litespeedtech:litespeed_cache:*:*:*:*:*:*:*:*"
    ],
    "vendor": "litespeedtech",
    "product": "litespeed_cache",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "6.5.0.1",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Source	Link
patchstack	www.patchstack.com/articles/critical-account-takeover-vulnerability-patched-in-litespeed-cache-plugin
patchstack	www.patchstack.com/database/vulnerability/litespeed-cache/wordpress-litespeed-cache-plugin-6-5-0-1-unauthenticated-account-takeover-vulnerability

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo