TLDR InfoSec · ATTACKS & VULNERABILITIES

WORDPRESS LITESPEED CACHE PLUGIN FLAW COULD ALLOW SITE TAKEOVER

securityaffairs.com2 min read

Summary from the TLDR InfoSec newsletter

A serious flaw in the WordPress LiteSpeed Cache plugin affecting versions up to 6.5.0.2 could allow attackers to run harmful code. The vulnerability allows for arbitrary script injection when certain settings are enabled, potentially leading to account hijacking and site takeover. The issue was fixed in version 6.5.1, but site admins should act quickly to secure their websites.