LiteSpeed Technologies

Products

Exploited and recent CVEs

• CVE-2026-54420 High 8.5 Exploited LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mishandles symlinks provided by a user with FTP or web shell access on a shared hosting server running Clou 1.4%
• CVE-2026-48172 Critical 10.0 Exploited LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as exploited in the wild in May 2026. Detection is best done via a command line of grep -rE "cpanel_jsonap 17.9%
• CVE-2026-48172 Critical 10.0 Exploited LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as exploited in the wild in May 2026. Detection is best done via a command line of grep -rE "cpanel_jsonap 17.9%
• CVE-2026-84761 High 7.2 WordPress LiteSpeed Cache plugin <= 7.9 - Server Side Request Forgery (SSRF) vulnerability 0.3%
• CVE-2026-31386 High 7.2 OpenLiteSpeed and LSWS Enterprise provided by LiteSpeed Technologies contain an OS command injection vulnerability. An arbitrary OS command may be executed by an attacker with the administrative privi 1.5%
• CVE-2026-31386 High 7.2 OpenLiteSpeed and LSWS Enterprise provided by LiteSpeed Technologies contain an OS command injection vulnerability. An arbitrary OS command may be executed by an attacker with the administrative privi 1.5%
• CVE-2024-51915 Medium 6.5 WordPress LiteSpeed Cache plugin <= 6.5.2 - Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2021-47855 High 7.2 Openlitespeed 1.7.9 - 'Notes' Stored Cross-Site Scripting 0.3%
• CVE-2025-47437 Medium 6.4 WordPress LiteSpeed Cache plugin <= 7.0.1 - Server Side Request Forgery (SSRF) vulnerability 0.3%
• CVE-2024-50550 High 8.1 WordPress LiteSpeed Cache plugin <= 6.5.1 - Privilege Escalation vulnerability 0.9%
• CVE-2024-44000 Critical 9.8 WordPress LiteSpeed Cache plugin < 6.5.0.1 - Unauthenticated Account Takeover via Cookie Leak vulnerability 82.3%
• CVE-2024-47637 High 8.8 WordPress LiteSpeed Cache plugin <= 6.4.1 - Path Traversal vulnerability 0.6%
• CVE-2024-47373 Medium 6.5 WordPress LiteSpeed Cache plugin <= 6.5.0.2 - Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2024-47374 High 7.1 WordPress LiteSpeed Cache plugin <= 6.5.0.2 - Cross Site Scripting (XSS) vulnerability 1.4%
• CVE-2024-28000 Critical 9.8 WordPress LiteSpeed Cache plugin <= 6.3.0.1 - Unauthenticated Privilege Escalation vulnerability 68.3%
• CVE-2023-45000 High 8.2 WordPress LiteSpeed Cache plugin <= 5.7 - Unauthenticated Broken Access Control on API vulnerability 0.4%
• CVE-2023-40000 High 8.3 WordPress LiteSpeed Cache plugin <= 5.7 - Unauthenticated Site Wide Stored XSS vulnerability 54.9%
• CVE-2022-46800 Medium 5.4 WordPress LiteSpeed Cache Plugin <= 5.3 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%
• CVE-2022-0074 High 8.8 Privilege Escalation in OpenLiteSpeed Web Server 1.4%
• CVE-2022-0074 High 8.8 Privilege Escalation in OpenLiteSpeed Web Server 1.4%
• CVE-2022-0073 High 8.8 Authenticated Remote Code Execution in OpenLiteSpeed Web Server 9.7%
• CVE-2022-0073 High 8.8 Authenticated Remote Code Execution in OpenLiteSpeed Web Server 9.7%
• CVE-2022-0072 Medium 5.8 Directory Traversal in OpenLiteSpeed Web Server 1.1%
• CVE-2022-0072 Medium 5.8 Directory Traversal in OpenLiteSpeed Web Server 1.1%