Litespeed Technologies vulnerabilities

Products

• Cache 12
• Web Server 4
• Openlitespeed 4
• Openlitespeed Web Server 3
• Cpanel Plugin 2

Newest

• litespeed technologies openlitespeed OpenLiteSpeed through 1.9.4 mTLS Bypass via HTTP/3 SNI and Host Mismatch CVE-2026-119559 8.2 HighOctober 30, 2026
• litespeed technologies openlitespeed OpenLiteSpeed before 1.9.3 Local Privilege Escalation via lsup.sh Auto-Update CVE-2026-104474 5.4 MediumOctober 2, 2026
• litespeed technologies web server, litespeedtech litespeed web server +1 more LiteSpeed Web Server (LSWS) before 6.3.7 build 1 mishandles internal redirect URL validation in a... CVE-2026-93903 Public exploit 9.4 CriticalSeptember 30, 2026
• litespeed technologies cache, litespeedtech litespeed cache +1 more WordPress LiteSpeed Cache plugin <= 7.9 - Server Side Request Forgery (SSRF) vulnerability CVE-2026-84761 7.2 HighSeptember 3, 2026
• litespeed cpanel plugin, litespeedtech litespeed cpanel plugin, litespeed whm plugin +2 more LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0)... CVE-2026-54420 In KEVPublic exploit 8.5 HighJune 14, 2026
• litespeed cpanel plugin, litespeed technologies whm plugin, litespeedtech litespeed cpanel plugin +1 more +3 more LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as... CVE-2026-48172 In KEVPublic exploit EPSS 17.9% 10.0 CriticalMay 21, 2026
• litespeed technologies lsws enterprise, openlitespeed, litespeedtech litespeed web server +2 more OpenLiteSpeed and LSWS Enterprise provided by LiteSpeed Technologies contain an OS command... CVE-2026-31386 8.6 HighMarch 16, 2026
• litespeed technologies cache, litespeedtech litespeed cache +1 more WordPress LiteSpeed Cache plugin <= 6.5.2 - Cross Site Scripting (XSS) vulnerability CVE-2024-51915 6.5 MediumFebruary 20, 2026
• litespeed technologies openlitespeed Openlitespeed 1.7.9 - 'Notes' Stored Cross-Site Scripting CVE-2021-47855 5.1 MediumJanuary 21, 2026
• litespeed technologies cache, litespeedtech litespeed cache +1 more WordPress LiteSpeed Cache plugin <= 7.0.1 - Server Side Request Forgery (SSRF) vulnerability CVE-2025-47437 6.4 MediumSeptember 9, 2025
• litespeed technologies cache, litespeedtech litespeed cache +1 more WordPress LiteSpeed Cache plugin <= 6.5.1 - Privilege Escalation vulnerability CVE-2024-50550 8.1 HighOctober 29, 2024
• litespeed technologies cache, litespeedtech litespeed cache +1 more WordPress LiteSpeed Cache plugin < 6.5.0.1 - Unauthenticated Account Takeover via Cookie Leak vulnerability CVE-2024-44000 Public exploit EPSS 82.3% 9.8 CriticalOctober 20, 2024
• litespeed technologies cache, litespeedtech litespeed cache +1 more WordPress LiteSpeed Cache plugin <= 6.4.1 - Path Traversal vulnerability CVE-2024-47637 8.8 HighOctober 16, 2024
• litespeed technologies cache, litespeedtech litespeed cache +1 more WordPress LiteSpeed Cache plugin <= 6.5.0.2 - Cross Site Scripting (XSS) vulnerability CVE-2024-47373 6.5 MediumOctober 5, 2024
• litespeed technologies cache, litespeedtech litespeed cache +1 more WordPress LiteSpeed Cache plugin <= 6.5.0.2 - Cross Site Scripting (XSS) vulnerability CVE-2024-47374 7.1 HighOctober 5, 2024
• litespeed technologies cache, litespeedtech litespeed cache +1 more WordPress LiteSpeed Cache plugin <= 6.3.0.1 - Unauthenticated Privilege Escalation vulnerability CVE-2024-28000 Public exploit EPSS 68.3% 9.8 CriticalAugust 21, 2024
• litespeed technologies cache, litespeedtech litespeed cache +1 more WordPress LiteSpeed Cache plugin <= 5.7 - Unauthenticated Broken Access Control on API vulnerability CVE-2023-45000 8.2 HighApril 16, 2024
• litespeed technologies cache, litespeedtech litespeed cache +1 more WordPress LiteSpeed Cache plugin <= 5.7 - Unauthenticated Site Wide Stored XSS vulnerability CVE-2023-40000 Public exploit EPSS 54.9% 8.3 HighApril 16, 2024
• litespeed technologies cache, litespeedtech litespeed cache +1 more WordPress LiteSpeed Cache Plugin <= 5.3 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2022-46800 5.4 MediumMay 25, 2023
• litespeed technologies web server, openlitespeed web server, litespeedtech openlitespeed +2 more Privilege Escalation in OpenLiteSpeed Web Server CVE-2022-0074 8.8 HighOctober 27, 2022
• litespeed technologies web server, openlitespeed web server, litespeedtech openlitespeed +2 more Authenticated Remote Code Execution in OpenLiteSpeed Web Server CVE-2022-0073 8.8 HighOctober 27, 2022
• litespeed technologies web server, openlitespeed web server, litespeedtech openlitespeed +2 more Directory Traversal in OpenLiteSpeed Web Server CVE-2022-0072 5.8 MediumOctober 27, 2022