---
title: "LiteSpeed Technologies LiteSpeed Cache vulnerabilities and CVEs"
url: https://radicalnotion.ai/vendor/litespeedtechnologies/litespeed-cache
type: product
description: "LiteSpeed Technologies LiteSpeed Cache has 12 published CVEs, 0 in CISA KEV and 3 with public exploits."
updated: 2026-09-03
source: RadicalNotion.AI
license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/)
---

# LiteSpeed Technologies LiteSpeed Cache vulnerabilities

Vendor: [LiteSpeed Technologies](https://radicalnotion.ai/vendor/litespeedtechnologies)

- **Published CVEs:** 12
- **In CISA KEV:** 0
- **With a public exploit:** 3
- **With a patch:** 12
- **Average CVSS:** 8.1
- **First CVE:** 2023-05-25
- **Latest CVE:** 2026-09-03

## Severity breakdown

| Severity | CVEs |
| --- | --- |
| Critical | 3 |
| High | 6 |
| Medium | 3 |
| Low | 0 |
| Unscored | 0 |

## Most common weakness types

| CWE | Name | CVEs |
| --- | --- | --- |
| [CWE-79](https://radicalnotion.ai/cwe/cwe-79) | Improper Neutralization of Input During Web Page Generation | 4 |
| [CWE-266](https://radicalnotion.ai/cwe/cwe-266) | Incorrect Privilege Assignment | 2 |
| [CWE-918](https://radicalnotion.ai/cwe/cwe-918) | Server-Side Request Forgery | 2 |
| [CWE-862](https://radicalnotion.ai/cwe/cwe-862) | Missing Authorization | 1 |
| [CWE-522](https://radicalnotion.ai/cwe/cwe-522) | Insufficiently Protected Credentials | 1 |
| [CWE-352](https://radicalnotion.ai/cwe/cwe-352) | Cross-Site Request Forgery | 1 |
| [CWE-23](https://radicalnotion.ai/cwe/cwe-23) | Relative Path Traversal | 1 |

## CVEs by year

| Year | CVEs published |
| --- | --- |
| 2023 | 1 |
| 2024 | 8 |
| 2025 | 1 |
| 2026 | 2 |

## Affected versions (top 21 of 28)

| Version | Kind | CVEs |
| --- | --- | --- |
| \>= 6.5.1 | range | 3 |
| \<= 5.7 | range | 2 |
| \<= 6.5.0.2 | range | 2 |
| \>= 5.7.0.1 | range | 2 |
| \<= 5.3 | range | 1 |
| \<= 6.3.0.1 | range | 1 |
| \<= 6.4.1 | range | 1 |
| \<= 6.5.0.1 | range | 1 |
| \<= 6.5.1 | range | 1 |
| \<= 6.5.2 | range | 1 |
| \<= 7.0.1 | range | 1 |
| \<= 7.9 | range | 1 |
| 6.5.1 | patched | 3 |
| 5.7.0.1 | patched | 2 |
| 5.3.1 | patched | 1 |
| 6.4 | patched | 1 |
| 6.5.0.1 | patched | 1 |
| 6.5.2 | patched | 1 |
| 6.5.3 | patched | 1 |
| 7.1 | patched | 1 |
| 7.9.1 | patched | 1 |

## CVEs

| CVE | Title | Severity | CVSS | CISA KEV | Public exploit | Patch |
| --- | --- | --- | --- | --- | --- | --- |
| CVE-2026-84761 | WordPress LiteSpeed Cache plugin \<= 7.9 - Server Side Request Forgery (SSRF) vulnerability | high | 7.2 | No | No | Yes |
| CVE-2024-51915 | WordPress LiteSpeed Cache plugin \<= 6.5.2 - Cross Site Scripting (XSS) vulnerability | medium | 6.5 | No | No | Yes |
| CVE-2025-47437 | WordPress LiteSpeed Cache plugin \<= 7.0.1 - Server Side Request Forgery (SSRF) vulnerability | medium | 6.4 | No | No | Yes |
| CVE-2024-50550 | WordPress LiteSpeed Cache plugin \<= 6.5.1 - Privilege Escalation vulnerability | critical | 9.8 | No | No | Yes |
| CVE-2024-44000 | WordPress LiteSpeed Cache plugin \< 6.5.0.1 - Unauthenticated Account Takeover via Cookie Leak vulnerability | critical | 9.8 | No | Yes | Yes |
| CVE-2024-47637 | WordPress LiteSpeed Cache plugin \<= 6.4.1 - Path Traversal vulnerability | high | 8.8 | No | No | Yes |
| CVE-2024-47373 | WordPress LiteSpeed Cache plugin \<= 6.5.0.2 - Cross Site Scripting (XSS) vulnerability | medium | 6.5 | No | No | Yes |
| CVE-2024-47374 | WordPress LiteSpeed Cache plugin \<= 6.5.0.2 - Cross Site Scripting (XSS) vulnerability | high | 7.1 | No | No | Yes |
| CVE-2024-28000 | WordPress LiteSpeed Cache plugin \<= 6.3.0.1 - Unauthenticated Privilege Escalation vulnerability | critical | 9.8 | No | Yes | Yes |
| CVE-2023-45000 | WordPress LiteSpeed Cache plugin \<= 5.7 - Unauthenticated Broken Access Control on API vulnerability | high | 8.2 | No | No | Yes |
| CVE-2023-40000 | WordPress LiteSpeed Cache plugin \<= 5.7 - Unauthenticated Site Wide Stored XSS vulnerability | high | 8.3 | No | Yes | Yes |
| CVE-2022-46800 | WordPress LiteSpeed Cache Plugin \<= 5.3 is vulnerable to Cross Site Request Forgery (CSRF) | high | 8.8 | No | No | Yes |

## Frequently asked questions

### How many CVEs does LiteSpeed Technologies LiteSpeed Cache have?

LiteSpeed Technologies LiteSpeed Cache has 12 published CVE records since 2023.

### How many LiteSpeed Technologies LiteSpeed Cache CVEs are in CISA KEV?

None of LiteSpeed Technologies LiteSpeed Cache's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

### Are there public exploits for LiteSpeed Technologies LiteSpeed Cache vulnerabilities?

Yes — 3 of LiteSpeed Technologies LiteSpeed Cache's CVEs have a known public exploit.

### Which versions of LiteSpeed Technologies LiteSpeed Cache are affected?

28 distinct LiteSpeed Technologies LiteSpeed Cache versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

### What are the most common weakness types in LiteSpeed Technologies LiteSpeed Cache CVEs?

LiteSpeed Technologies LiteSpeed Cache's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation), CWE-266 (Incorrect Privilege Assignment), CWE-918 (Server-Side Request Forgery), CWE-862 (Missing Authorization).

### How many critical LiteSpeed Technologies LiteSpeed Cache vulnerabilities are there?

LiteSpeed Technologies LiteSpeed Cache has 3 critical and 6 high-severity CVEs.

### What is the average severity of LiteSpeed Technologies LiteSpeed Cache CVEs?

The average CVSS base score across LiteSpeed Technologies LiteSpeed Cache's scored CVEs is 8.1.

## Other products from this vendor

- [LiteSpeed Web Server](https://radicalnotion.ai/vendor/litespeedtechnologies/litespeed-web-server) (5 CVEs)
- [OpenLiteSpeed Web Server](https://radicalnotion.ai/vendor/litespeedtechnologies/openlitespeed-web-server) (3 CVEs)
- [cPanel Plugin](https://radicalnotion.ai/vendor/litespeedtechnologies/cpanel-plugin) (2 CVEs)
- [OpenLiteSpeed](https://radicalnotion.ai/vendor/litespeedtechnologies/openlitespeed) (2 CVEs)
- [LiteSpeed Web Server Enterprise](https://radicalnotion.ai/vendor/litespeedtechnologies/litespeed-web-server-enterprise) (1 CVEs)
- [LSWS Enterprise](https://radicalnotion.ai/vendor/litespeedtechnologies/lsws-enterprise) (1 CVEs)
- [WHM Plugin](https://radicalnotion.ai/vendor/litespeedtechnologies/whm-plugin) (1 CVEs)

---

Source: [RadicalNotion.AI](https://radicalnotion.ai/vendor/litespeedtechnologies/litespeed-cache). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.