Vendor
Litespeed Technologies
21 known vulnerabilities in products by Litespeed Technologies, 2 of them actively exploited (CISA KEV).
Key figures
21
Vulnerabilities
2
Actively exploited (KEV)
0
Used by ransomware
5
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-48172 | LiteSpeed cPanel Plugin Privilege Escalation Vulnerability In CISA KEValso in 1 other product | 9.8 | |
| Critical | CVE-2026-54420 | LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability In CISA KEValso in 1 other product | 8.5 | |
| Critical | CVE-2024-44000 | LiteSpeed Cache: Insufficiently Protected Credentials | 9.8 | |
| Critical | CVE-2024-28000 | WordPress LiteSpeed Cache plugin <= 6.3.0.1 - Unauthenticated Privilege Escalation vulnerability | 9.8 | |
| High | CVE-2023-40000 | WordPress LiteSpeed Cache plugin <= 5.7 - Unauthenticated Site Wide Stored XSS vulnerability | 8.3 | |
| High | CVE-2022-0073 | Authenticated Remote Code Execution in OpenLiteSpeed Web Server | 8.8 | |
| High | CVE-2026-31386 | LiteSpeed Technologies OpenLiteSpeed: OS Command Injection | 7.2 | |
| High | CVE-2022-0074 | Privilege Escalation in OpenLiteSpeed Web Server | 8.8 | |
| High | CVE-2024-47374 | WordPress LiteSpeed Cache plugin <= 6.5.0.2 - Cross Site Scripting (XSS) vulnerability | 7.1 | |
| Not rated | CVE-2007-5654 | LiteSpeed Web Server: security vulnerability | — | |
| Critical | CVE-2024-50550 | WordPress LiteSpeed Cache plugin <= 6.5.1 - Privilege Escalation vulnerability | 8.1 | |
| High | CVE-2024-47637 | WordPress LiteSpeed Cache plugin <= 6.4.1 - Path Traversal vulnerability | 8.8 | |
| Medium | CVE-2022-0072 | Directory Traversal in OpenLiteSpeed Web Server | 5.8 | |
| High | CVE-2026-84761 | WordPress LiteSpeed Cache plugin <= 7.9 - Server Side Request Forgery (SSRF) vulnerability | 7.2 | |
| High | CVE-2023-45000 | WordPress LiteSpeed Cache plugin <= 5.7 - Unauthenticated Broken Access Control on API vulnerability | 8.2 | |
| High | CVE-2021-47855 | Openlitespeed 1.7.9 - 'Notes' Stored Cross-Site Scripting | 7.2 | |
| Not rated | CVE-2005-3695 | LiteSpeed Web Server: Cross-Site Scripting (XSS) | — | |
| Medium | CVE-2024-51915 | WordPress LiteSpeed Cache plugin <= 6.5.2 - Cross Site Scripting (XSS) vulnerability | 6.5 | |
| Medium | CVE-2025-47437 | WordPress LiteSpeed Cache plugin <= 7.0.1 - Server Side Request Forgery (SSRF) vulnerability | 6.4 | |
| Medium | CVE-2024-47373 | WordPress LiteSpeed Cache plugin <= 6.5.0.2 - Cross Site Scripting (XSS) vulnerability | 6.5 | |
| High | CVE-2022-46800 | WordPress LiteSpeed Cache Plugin <= 5.3 is vulnerable to Cross Site Request Forgery (CSRF) | 5.4 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 24sans-atrisk-mail,
- CISA warns of another cPanel plugin flaw exploited in attacksbleepingcomputer,
- CISA Flags LiteSpeed cPanel Plugin Flaw Exploited for Root Privilege Escalationthehackernews,
- Recent KEV Additions: LiteSpeed cPanel Plugin, Cisco Catalyst SD-WAN Manager, and Splunk Enterprisesans-newsbites-mail,
- LiteSpeed cPanel Plugin Privilege Escalation Exploitedsans-newsbites-mail,
- Fwd: @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 21sans-atrisk,
Products
| Litespeed Cache | 12 | 0 |
| Litespeed Web Server | 5 | 0 |
| Openlitespeed Web Server | 3 | 0 |