en
LiteSpeed Technologies, Inc. is a privately held United States software company focused on high-performance web servers and web-acceleration technology. Founded in 2002, it develops commercial and open-source software for hosting providers, internet service providers, corporate data centers, and website operators. Its products support web delivery, caching, and server administration.
As of 10/21/2026, LiteSpeed Technologies recorded 1 security vulnerabilities in the last 90 days across 1 products, including 1 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, LiteSpeed Cache had the most security vulnerabilities in the LiteSpeed Technologies ecosystem, with 1 vulnerabilities—approximately 100% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-84761WordPress LiteSpeed Cache plugin <= 7.9 - Server Side Request Forgery (SSRF) vulnerabilityCVE-2026-54420CVE-2026-54420CVE-2026-48172CVE-2026-48172CVE-2026-31386CVE-2026-31386CVE-2024-51915WordPress LiteSpeed Cache plugin <= 6.5.2 - Cross Site Scripting (XSS) vulnerability| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-84761WordPress LiteSpeed Cache plugin <= 7.9 - Server Side Request Forgery (SSRF) vulnerability | Exploitation statusNot exploited | FixYes |
| Affected productLiteSpeed Cache |
| Published09/03/2026 |
| SeverityHigh |
CVE-2026-54420CVE-2026-54420 | Exploitation statusKEV | FixYes | Affected productcPanel Plugin | Published06/14/2026 | SeverityHigh |
|---|
CVE-2026-48172CVE-2026-48172 | Exploitation statusKEV | FixYes | Affected productcPanel Plugin | Published05/21/2026 | SeverityCritical |
|---|
CVE-2026-31386CVE-2026-31386 | Exploitation statusNot exploited | FixNo | Affected productOpenLiteSpeed | Published03/16/2026 | SeverityHigh |
|---|
CVE-2024-51915WordPress LiteSpeed Cache plugin <= 6.5.2 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productLiteSpeed Cache | Published02/20/2026 | SeverityMedium |
|---|
CVE-2021-47855Openlitespeed 1.7.9 - 'Notes' Stored Cross-Site Scripting | Exploitation statusActively exploited | FixNo | Affected productOpenLiteSpeed | Published01/21/2026 | SeverityMedium |
|---|
CVE-2025-47437WordPress LiteSpeed Cache plugin <= 7.0.1 - Server Side Request Forgery (SSRF) vulnerability | Exploitation statusNot exploited | FixYes | Affected productLiteSpeed Cache | Published09/09/2025 | SeverityMedium |
|---|
CVE-2024-50550WordPress LiteSpeed Cache plugin <= 6.5.1 - Privilege Escalation vulnerability | Exploitation statusNot exploited | FixYes | Affected productLiteSpeed Cache | Published10/29/2024 | SeverityHigh |
|---|
CVE-2024-44000WordPress LiteSpeed Cache plugin < 6.5.0.1 - Unauthenticated Account Takeover via Cookie Leak vulnerability | Exploitation statusNot exploited | FixYes | Affected productLiteSpeed Cache | Published10/20/2024 | SeverityCritical |
|---|
CVE-2024-47637WordPress LiteSpeed Cache plugin <= 6.4.1 - Path Traversal vulnerability | Exploitation statusNot exploited | FixYes | Affected productLiteSpeed Cache | Published10/16/2024 | SeverityHigh |
|---|
19 Results | Page 1 of 2