Incorrect Privilege Assignment vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache.This issue affects LiteSpeed Cache: from n/a through <= 6.3.0.1.

WordPress LiteSpeed Cache plugin privilege escalation vulnerability actively being targeted 

The WordPress LiteSpeed Cache Plugin installed on the remote host is affected by an unauthenticated Privilege Escalation.

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

The WordPress application running on the remote host has a version of the 'LiteSpeed Cache' plugin that is prior to 6.4. It is, therefore, affected by a privilege escalation vulnerability. An unauthenticated remote attacker could elevate their privileges to that of an account with the administrator role.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
114406	LiteSpeed Cache Plugin for WordPress < 6.4 Privilege Escalation	Web App Scanning	Component Vulnerability	Version Based	critical
206164	WordPress Plugin 'LiteSpeed Cache' < 6.4 Privilege Escalation	Nessus	CGI abuses	Remote	critical

Detections

Analytics

CVE-2024-28000

critical

Tenable Plugins

critical

critical