litespeedtech
- Total products in the ecosystem
- 2
- Total vulnerabilities (90 days)
- 3
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
Verify to analyze this security profile
As of 09/20/2026, litespeedtech recorded 3 security vulnerabilities in the last 90 days across 1 products, including 1 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, LiteSpeed Cache had the most security vulnerabilities in the litespeedtech ecosystem, with 3 vulnerabilities—approximately 100% of the provider's total vulnerabilities during this period.
| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-76579LiteSpeed Cache <= 7.9 - Reflected Cross-Site Scripting via ESI 'esi' Parameter | Exploitation statusNot confirmed | FixYes | Affected productLiteSpeed Cache | Published09/19/2026 | SeverityMedium |
CVE-2026-3129LiteSpeed Cache <= 7.7 - Authenticated (Author+) Stored Cross-Site Scripting via img Tag Attributes | Exploitation statusNot known exploited | FixYes | Affected productLiteSpeed Cache | Published08/28/2026 | SeverityMedium |
CVE-2026-18978LiteSpeed Cache <= 7.8.1 - Unauthenticated Stored Cross-Site Scripting via Comment Content | Exploitation statusNot known exploited | FixYes | Affected productLiteSpeed Cache | Published08/28/2026 | SeverityHigh |
CVE-2026-54420 | Exploitation statusKEV | FixYes | Affected productcPanel Plugin | Published06/14/2026 | SeverityHigh |
CVE-2026-3375LiteSpeed Cache <= 7.7 - Unauthenticated Stored Cross-Site Scripting via QUIC.cloud CCSS/UCSS REST API Endpoints | Exploitation statusNot known exploited | FixYes | Affected productLiteSpeed Cache | Published05/27/2026 | SeverityHigh |
CVE-2026-48172 | Exploitation statusKEV | FixYes | Affected productcPanel Plugin | Published05/21/2026 | SeverityCritical |
CVE-2026-31386 | Exploitation statusNot known exploited | FixNot confirmed | Affected productOpenLiteSpeed | Published03/16/2026 | SeverityHigh |
CVE-2025-12450LiteSpeed Cache <= 7.5.0.1 - Reflected Cross-Site Scripting | Exploitation statusNot known exploited | FixYes | Affected productLiteSpeed Cache | Published10/29/2025 | SeverityMedium |
CVE-2025-54939 | Exploitation statusNot known exploited | FixYes | Affected productLSQUIC | Published08/01/2025 | SeverityMedium |
CVE-2025-24947 | Exploitation statusNot known exploited | FixYes | Affected productLSQUIC | Published02/20/2025 | SeverityMedium |
CVE-2024-50550WordPress LiteSpeed Cache plugin <= 6.5.1 - Privilege Escalation vulnerability | Exploitation statusNot known exploited | FixYes | Affected productLiteSpeed Cache | Published10/29/2024 | SeverityHigh |
CVE-2024-44000WordPress LiteSpeed Cache plugin < 6.5.0.1 - Unauthenticated Account Takeover via Cookie Leak vulnerability | Exploitation statusNot known exploited | FixYes | Affected productLiteSpeed Cache | Published10/20/2024 | SeverityCritical |
CVE-2024-47637WordPress LiteSpeed Cache plugin <= 6.4.1 - Path Traversal vulnerability | Exploitation statusNot known exploited | FixYes | Affected productLiteSpeed Cache | Published10/16/2024 | SeverityHigh |
CVE-2024-47373WordPress LiteSpeed Cache plugin <= 6.5.0.2 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot known exploited | FixYes | Affected productLiteSpeed Cache | Published10/05/2024 | SeverityMedium |
CVE-2024-47374WordPress LiteSpeed Cache plugin <= 6.5.0.2 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot known exploited | FixYes | Affected productLiteSpeed Cache | Published10/05/2024 | SeverityHigh |
CVE-2024-9169litespeed cache <= 6.4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting | Exploitation statusNot known exploited | FixYes | Affected productLiteSpeed Cache | Published09/25/2024 | SeverityMedium |
CVE-2024-28000WordPress LiteSpeed Cache plugin <= 6.3.0.1 - Unauthenticated Privilege Escalation vulnerability | Exploitation statusPublic exploit | FixYes | Affected productLiteSpeed Cache | Published08/21/2024 | SeverityCritical |
CVE-2024-3246LiteSpeed Cache <= 6.2.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting | Exploitation statusNot known exploited | FixYes | Affected productLiteSpeed Cache | Published07/24/2024 | SeverityMedium |
CVE-2024-31617 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published05/22/2024 | SeverityMedium |
CVE-2023-45000WordPress LiteSpeed Cache plugin <= 5.7 - Unauthenticated Broken Access Control on API vulnerability | Exploitation statusNot known exploited | FixYes | Affected productLiteSpeed Cache | Published04/16/2024 | SeverityHigh |
CVE-2023-40000WordPress LiteSpeed Cache plugin <= 5.7 - Unauthenticated Site Wide Stored XSS vulnerability | Exploitation statusPublic exploit | FixYes | Affected productLiteSpeed Cache | Published04/16/2024 | SeverityHigh |
CVE-2024-25678 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published02/09/2024 | SeverityMedium |
CVE-2023-4372LiteSpeed Cache <= 5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode | Exploitation statusNot known exploited | FixYes | Affected productLiteSpeed Cache | Published01/11/2024 | SeverityMedium |
CVE-2023-40518 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published08/14/2023 | SeverityUnknown |
CVE-2022-46800WordPress LiteSpeed Cache Plugin <= 5.3 is vulnerable to Cross Site Request Forgery (CSRF) | Exploitation statusNot known exploited | FixYes | Affected productLiteSpeed Cache | Published05/25/2023 | SeverityMedium |
CVE-2022-0074Privilege Escalation in OpenLiteSpeed Web Server | Exploitation statusNot known exploited | FixYes | Affected productOpenLiteSpeed Web Server | Published10/27/2022 | SeverityHigh |
CVE-2022-0073Authenticated Remote Code Execution in OpenLiteSpeed Web Server | Exploitation statusPublic exploit | FixYes | Affected productOpenLiteSpeed Web Server | Published10/27/2022 | SeverityHigh |
CVE-2022-0072Directory Traversal in OpenLiteSpeed Web Server | Exploitation statusNot known exploited | FixYes | Affected productOpenLiteSpeed Web Server | Published10/27/2022 | SeverityMedium |
CVE-2022-30592 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published05/11/2022 | SeverityUnknown |
CVE-2021-24964LiteSpeed Cache < 4.4.4 - IP Check Bypass to Unauthenticated Stored XSS | Exploitation statusPublic exploit | FixYes | Affected productLiteSpeed Cache | Published01/03/2022 | SeverityMedium |
CVE-2021-24963LiteSpeed Cache < 4.4.4 - Admin+ Reflected Cross-Site Scripting | Exploitation statusNot confirmed | FixYes | Affected productLiteSpeed Cache | Published01/03/2022 | SeverityUnknown |
CVE-2021-26758 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published04/07/2021 | SeverityUnknown |
CVE-2020-29172 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/26/2020 | SeverityUnknown |
CVE-2020-5519 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published01/06/2020 | SeverityUnknown |
CVE-2018-19792 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/03/2018 | SeverityUnknown |
CVE-2018-19791 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/03/2018 | SeverityUnknown |
CVE-2015-3890 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published09/20/2017 | SeverityUnknown |
CVE-2012-4871 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published09/06/2012 | SeverityUnknown |
CVE-2010-2333 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published06/18/2010 | SeverityUnknown |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan
