Litespeed Cache (Unknown) - vulnerabilities (CVEs)

5 CVEs, 3 in the last 30 days, 1 known versions, newest CVE from 2026-10-23. Vendor: Unknown.

CVEs of Litespeed Cache

• CVE-2026-113501 - CVSS 3.1 (low), 2026-10-23: The LiteSpeed Cache WordPress plugin before 7.9.2 does not perform a capability check on its admin-notice dismissal handler, and the nonce it relies on is not…
• CVE-2026-113500 - CVSS 7.5 (high), 2026-10-23: The LiteSpeed Cache WordPress plugin before 7.9.2 does not limit one of its HTML optimization routines to stylesheet content, so it can delete the markup that…
• CVE-2026-113499 - CVSS 7.5 (high), 2026-10-23: The LiteSpeed Cache WordPress plugin before 7.9.2 does not restrict one of its HTML rewriting routines to stylesheet content, so it removes a quote that…
• CVE-2021-24964 - CVSS 6.1 (medium), 2022-01-03: The LiteSpeed Cache WordPress plugin before 4.4.4 does not properly verify that requests are coming from QUIC.cloud servers, allowing attackers to make…
• CVE-2021-24963 - CVSS 4.8 (medium), 2022-01-03: The LiteSpeed Cache WordPress plugin before 4.4.4 does not escape the qc_res parameter before outputting it back in the JS code of an admin page, leading to a…