https://pwn.watch/i/litespeed-cache-privilege-escalation-cve-2024-28000 A weak hash in the LiteSpeed Cache plugin's role-simulation feature let unauthenticated attackers brute-force a value and become administrator on WordPress sites. The plugin had 5+ million installs. Fixed in 6.4. en Wed, 21 Aug 2024 00:00:00 GMT https://pwn.watch/i/litespeed-cache-privilege-escalation-cve-2024-28000 https://pwn.watch/i/litespeed-cache-privilege-escalation-cve-2024-28000#2024-08-21-6bd5c6c3 Wed, 21 Aug 2024 00:00:00 GMT critical <p><a href="https://patchstack.com/articles/critical-privilege-escalation-in-litespeed-cache-plugin-affecting-5-million-sites/">Source</a></p> https://pwn.watch/i/litespeed-cache-privilege-escalation-cve-2024-28000 https://pwn.watch/i/litespeed-cache-privilege-escalation-cve-2024-28000#2024-08-13-0a322e89 Tue, 13 Aug 2024 00:00:00 GMT critical <p><a href="https://patchstack.com/articles/critical-privilege-escalation-in-litespeed-cache-plugin-affecting-5-million-sites/">Source</a></p>