Plugin icon

LiteSpeed Cache

litespeed-cache

Vulnerabilities:

18

Last Updated:

December 16, 2025

Active Installs:

7000000

Published
Title
Fixed in
CVSS
Published
2025-10-28
Title
LiteSpeed Cache < 7.6 - Reflected XSS
Fixed in
Fixed in 7.6
CVSS
7.1 (high)
Published
2025-05-07
Title
LiteSpeed Cache < 7.1 - Editor+ Server-Side Request Forgery
Fixed in
Fixed in 7.1
CVSS
5.5 (medium)
Published
2024-12-20
Title
LiteSpeed Cache < 6.5.3 - Contributor+ Stored XSS
Fixed in
Fixed in 6.5.3
CVSS
5.9 (medium)
Published
2024-10-29
Title
LiteSpeed Cache < 6.5.2 - Unauthenticated Privilege Escalation
Fixed in
Fixed in 6.5.2
CVSS
8.1 (high)
Published
2024-09-30
Title
LiteSpeed Cache < 6.5.1 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 6.5.1
CVSS
6.1 (medium)
Published
2024-09-30
Title
LiteSpeed Cache < 6.5.1 - Contributor+ Stored XSS
Fixed in
Fixed in 6.5.1
CVSS
5.9 (medium)
Published
2024-09-30
Title
LiteSpeed Cache < 6.5.1 - Author+ Path Traversal
Fixed in
Fixed in 6.5.1
CVSS
4.3 (medium)
Published
2024-09-24
Title
litespeed cache < 6.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Fixed in
Fixed in 6.5
CVSS
3.5 (low)
Published
2024-09-05
Title
LiteSpeed Cache < 6.5.0.1 - Unauthenticated Sensitive Information Exposure via Log Files
Fixed in
Fixed in 6.5.0.1
CVSS
7.5 (high)
Published
2024-08-21
Title
LiteSpeed Cache < 6.4 - Unauthenticated Privilege Escalation
Fixed in
Fixed in 6.4
CVSS
8.1 (high)
Published
2024-07-23
Title
LiteSpeed Cache < 6.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Fixed in
Fixed in 6.3
CVSS
6.1 (medium)
Published
2024-02-27
Title
LiteSpeed Cache < 5.7.0.1 - Unauthenticated Stored XSS
Fixed in
Fixed in 5.7.0.1
CVSS
8.8 (high)
Published
2024-02-27
Title
LiteSpeed Cache < 5.7.0.1 - Unauthenticated CDN Status Update
Fixed in
Fixed in 5.7.0.1
CVSS
5.3 (medium)
Published
2023-10-23
Title
LiteSpeed Cache < 5.7 - Contributor+ Stored XSS
Fixed in
Fixed in 5.7
CVSS
5.9 (medium)
Published
2023-03-22
Title
LiteSpeed Cache <= 5.3 - CSRF
Fixed in
Fixed in 5.3.1
CVSS
4.3 (medium)
Published
2021-11-30
Title
LiteSpeed Cache < 4.4.4 - Admin+ Reflected Cross-Site Scripting
Fixed in
Fixed in 4.4.4
CVSS
3.5 (low)
Published
2021-11-30
Title
LiteSpeed Cache < 4.4.4 - IP Check Bypass to Unauthenticated Stored XSS
Fixed in
Fixed in 4.4.4
CVSS
8.1 (high)
Published
2020-12-26
Title
LiteSpeed Cache < 3.6.1 - Authenticated Stored Cross-Site Scripting
Fixed in
Fixed in 3.6.1
CVSS
3.3 (low)