Product by LiteSpeed Technologies

    LiteSpeed Cache

    22 known vulnerabilities in LiteSpeed Cache (LiteSpeed Technologies), 0 of them actively exploited (CISA KEV).

    Key figures

    22

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in LiteSpeed Cache (LiteSpeed Technologies)
    CriticalCVE-2024-44000

    LiteSpeed Cache: Insufficiently Protected Credentials

    also in 1 other product

    		9.8
    CriticalCVE-2024-28000

    WordPress LiteSpeed Cache plugin <= 6.3.0.1 - Unauthenticated Privilege Escalation vulnerability

    also in 1 other product

    		9.8
    HighCVE-2023-40000

    WordPress LiteSpeed Cache plugin <= 5.7 - Unauthenticated Site Wide Stored XSS vulnerability

    also in 1 other product

    		8.3
    MediumCVE-2023-4372

    LiteSpeed Cache <= 5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    		6.4
    HighCVE-2024-47374

    WordPress LiteSpeed Cache plugin <= 6.5.0.2 - Cross Site Scripting (XSS) vulnerability

    also in 1 other product

    		7.1
    CriticalCVE-2024-50550

    WordPress LiteSpeed Cache plugin <= 6.5.1 - Privilege Escalation vulnerability

    also in 1 other product

    		8.1
    HighCVE-2026-18978

    LiteSpeed Cache <= 7.8.1 - Unauthenticated Stored Cross-Site Scripting via Comment Content

    		7.2
    HighCVE-2024-47637

    WordPress LiteSpeed Cache plugin <= 6.4.1 - Path Traversal vulnerability

    also in 1 other product

    		8.8
    MediumCVE-2021-24964

    LiteSpeed Cache < 4.4.4 - IP Check Bypass to Unauthenticated Stored XSS

    		6.1
    MediumCVE-2026-109215

    LiteSpeed Cache: Cross-site Scripting

    		6.4
    MediumCVE-2026-116763

    LiteSpeed Cache: Cross-site Scripting

    		5.4
    MediumCVE-2026-3129

    LiteSpeed Cache <= 7.7 - Authenticated (Author+) Stored Cross-Site Scripting via img Tag Attributes

    		6.4
    HighCVE-2026-3375

    Litespeedtech LiteSpeed Cache: Cross-site Scripting

    		7.2
    MediumCVE-2020-29172

    LiteSpeed Cache: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2026-76579

    LiteSpeed Cache <= 7.9 - Reflected Cross-Site Scripting via ESI 'esi' Parameter

    		4.7
    HighCVE-2023-45000

    WordPress LiteSpeed Cache plugin <= 5.7 - Unauthenticated Broken Access Control on API vulnerability

    also in 1 other product

    		8.2
    MediumCVE-2025-12450

    LiteSpeed Cache <= 7.5.0.1 - Reflected Cross-Site Scripting

    		6.1
    MediumCVE-2021-24963

    LiteSpeed Cache < 4.4.4 - Admin+ Reflected Cross-Site Scripting

    		4.8
    MediumCVE-2024-47373

    WordPress LiteSpeed Cache plugin <= 6.5.0.2 - Cross Site Scripting (XSS) vulnerability

    also in 1 other product

    		6.5
    MediumCVE-2024-9169

    litespeed cache <= 6.4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting

    		5.5
    MediumCVE-2024-3246

    LiteSpeed Cache <= 6.2.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting

    		6.1
    HighCVE-2022-46800

    WordPress LiteSpeed Cache Plugin <= 5.3 is vulnerable to Cross Site Request Forgery (CSRF)

    also in 1 other product

    		5.4

    All products by LiteSpeed Technologies