7.2Yüksek
WordPress LiteSpeed Cache plugin <= 7.9 - Server Side Request Forgery (SSRF) vulnerability
LiteSpeed Technologies LiteSpeed Cache
Unauthenticated Server Side Request Forgery (SSRF) in LiteSpeed Cache <= 7.9 versions.
LiteSpeed Technologies Inc güvenlik açıkları (CVE)
LiteSpeed Technologies Inc için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.
8.5Yüksek
CVE-2026-54420
KEV
LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability
LiteSpeed Technologies cPanel Plugin
LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mishandles symlinks provided by a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS, as exploited in the wild in May 2026.
1.4%EPSS
10.0Kritik
CVE-2026-48172
KEV
LiteSpeed cPanel Plugin Privilege Escalation Vulnerability
LiteSpeed Technologies cPanel Plugin; LiteSpeed Technologies WHM Plugin
LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as exploited in the wild in May 2026. Detection is best done via a command line of grep -rE "cpanel_jsonapi_func=redisAble" /var/cpanel/logs /usr/local/cpanel/logs/ …
18%EPSS
7.2Yüksek
LiteSpeed Technologies OpenLiteSpeed; LiteSpeed Technologies LSWS Enterprise
OpenLiteSpeed and LSWS Enterprise provided by LiteSpeed Technologies contain an OS command injection vulnerability. An arbitrary OS command may be executed by an attacker with the administrative privilege.
1.5%EPSS
6.5Orta
WordPress LiteSpeed Cache plugin <= 6.5.2 - Cross Site Scripting (XSS) vulnerability
LiteSpeed Technologies LiteSpeed Cache
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache allows Stored XSS.This issue affects LiteSpeed Cache: from n/a through <= 6.5.2.
8.8Yüksek
LiteSpeed Web Server Enterprise 5.4.11 - Command Injection
LiteSpeed Technologies Inc LiteSpeed Web Server Enterprise
LiteSpeed Web Server Enterprise 5.4.11 contains an authenticated command injection vulnerability in the external app configuration interface. Authenticated administrators can inject shell commands through the 'Command' parameter in the server configuration, a…
1.6%EPSS
7.2Yüksek
Openlitespeed 1.7.9 - 'Notes' Stored Cross-Site Scripting
LiteSpeed Technologies OpenLiteSpeed
Openlitespeed 1.7.9 contains a stored cross-site scripting vulnerability in the dashboard's Notes parameter that allows administrators to inject malicious scripts. Attackers can craft a payload in the Notes field during listener configuration that will execut…
6.4Orta
WordPress LiteSpeed Cache plugin <= 7.0.1 - Server Side Request Forgery (SSRF) vulnerability
LiteSpeed Technologies LiteSpeed Cache
Server-Side Request Forgery (SSRF) vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache.This issue affects LiteSpeed Cache: from n/a through <= 7.0.1.
8.1Yüksek
WordPress LiteSpeed Cache plugin <= 6.5.1 - Privilege Escalation vulnerability
LiteSpeed Technologies LiteSpeed Cache; litespeed_technologies litespeed_cache
Incorrect Privilege Assignment vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache allows Privilege Escalation.This issue affects LiteSpeed Cache: from n/a through <= 6.5.1.
9.8Kritik
WordPress LiteSpeed Cache plugin < 6.5.0.1 - Unauthenticated Account Takeover via Cookie Leak vulnerability
LiteSpeed Technologies LiteSpeed Cache; litespeedtech litespeed_cache
Insufficiently Protected Credentials vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache allows Authentication Bypass.This issue affects LiteSpeed Cache: from n/a through < 6.5.0.1.
82%EPSS
8.8Yüksek
WordPress LiteSpeed Cache plugin <= 6.4.1 - Path Traversal vulnerability
LiteSpeed Technologies LiteSpeed Cache; litespeed_technologies litespeed_cache
Relative Path Traversal vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache allows Path Traversal.This issue affects LiteSpeed Cache: from n/a through <= 6.4.1.
6.5Orta
WordPress LiteSpeed Cache plugin <= 6.5.0.2 - Cross Site Scripting (XSS) vulnerability
LiteSpeed Technologies LiteSpeed Cache
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache allows Stored XSS.This issue affects LiteSpeed Cache: from n/a through <= 6.5.0.2.
7.1Yüksek
WordPress LiteSpeed Cache plugin <= 6.5.0.2 - Cross Site Scripting (XSS) vulnerability
LiteSpeed Technologies LiteSpeed Cache
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache allows Stored XSS.This issue affects LiteSpeed Cache: from n/a through <= 6.5.0.2.
1.4%EPSS
9.8Kritik
WordPress LiteSpeed Cache plugin <= 6.3.0.1 - Unauthenticated Privilege Escalation vulnerability
LiteSpeed Technologies LiteSpeed Cache; litespeedtech litespeed_cache
Incorrect Privilege Assignment vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache.This issue affects LiteSpeed Cache: from n/a through <= 6.3.0.1.
68%EPSS
8.2Yüksek
WordPress LiteSpeed Cache plugin <= 5.7 - Unauthenticated Broken Access Control on API vulnerability
LiteSpeed Technologies LiteSpeed Cache; litespeedtech litespeed_cache
Missing Authorization vulnerability in LiteSpeed Technologies LiteSpeed Cache.This issue affects LiteSpeed Cache: from n/a through 5.7.
8.3Yüksek
WordPress LiteSpeed Cache plugin <= 5.7 - Unauthenticated Site Wide Stored XSS vulnerability
LiteSpeed Technologies LiteSpeed Cache; litespeed_technologies litespeed_cache
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LiteSpeed Technologies LiteSpeed Cache allows Stored XSS.This issue affects LiteSpeed Cache: from n/a through 5.7.
55%EPSS
5.4Orta
WordPress LiteSpeed Cache Plugin <= 5.3 is vulnerable to Cross Site Request Forgery (CSRF)
LiteSpeed Technologies LiteSpeed Cache
Cross-Site Request Forgery (CSRF) vulnerability in LiteSpeed Technologies LiteSpeed Cache plugin <= 5.3 versions.
8.8Yüksek
Privilege Escalation in OpenLiteSpeed Web Server
LiteSpeed Technologies OpenLiteSpeed Web Server; LiteSpeed Technologies LiteSpeed Web Server
Untrusted Search Path vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server Container allows Privilege Escalation. This affects versions from 1.6.15 before 1.7.16.1.
1.4%EPSS
8.8Yüksek
Authenticated Remote Code Execution in OpenLiteSpeed Web Server
LiteSpeed Technologies OpenLiteSpeed Web Server; LiteSpeed Technologies LiteSpeed Web Server
Improper Input Validation vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards allows Command Injection. This affects 1.7.0 versions before 1.7.16.1.
10%EPSS
5.8Orta
Directory Traversal in OpenLiteSpeed Web Server
LiteSpeed Technologies OpenLiteSpeed Web Server; LiteSpeed Technologies LiteSpeed Web Server
Directory Traversal vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards allows Path Traversal. This affects versions from 1.5.11 through 1.5.12, from 1.6.5 through 1.6.20.1, from 1.7.0 before 1.7.16.1
1.1%EPSS