Skip to content

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

Litespeed

Security incidents tagged Litespeed. Newest first.

0 Litespeed incidents in the last 12 months

Critical 4 · High 3 · Med 2 · Low 1 · Update ½LessMore
Incidents
1
Live
0
Patched
1
Days without an incident
800
Longest quiet run: 792 days (Aug 22–Oct 22)
Show 1 older incident

August 2024 1

  • CriticalLiteSpeed Cache WordPress plugin: unauthenticated admin takeover (CVE-2024-28000)

    LiteSpeed Cache (WordPress plugin) Patched

    A weak hash in the LiteSpeed Cache plugin's role-simulation feature let unauthenticated attackers brute-force a value and become administrator on WordPress sites. The plugin had 5+ million installs. Fixed in 6.4.

    Open incident →CVE-2024-28000