WordPress Plugin Vulnerabilities

LiteSpeed Cache < 6.5.2 - Unauthenticated Privilege Escalation

Description

The plugin is vulnerable to privilege escalation This is due to the is_role_simulation() function not properly providing protection against unauthorized use of the function. This makes it possible for unauthenticated attackers to simulate roles such as administrators which provides elevated access to the site. Please note there are a lot of pre-requisites for this to be exploitable.

Affects Plugins

Fixed in 6.5.2

References

Classification

Miscellaneous

Original Researcher
TaiYou
Verified
No

Timeline

Publicly Published
2024-10-29 (about 1 year ago)
Added
2024-12-19 (about 1 year ago)
Last Updated
2024-12-19 (about 1 year ago)

Other