TLDR InfoSec · ATTACKS & VULNERABILITIES
WORDPRESS LITESPEED CACHE PLUGIN FLAW COULD ALLOW SITE TAKEOVER
Summary from the TLDR InfoSec newsletter
A serious flaw in the WordPress LiteSpeed Cache plugin affecting versions up to 6.5.0.2 could allow attackers to run harmful code. The vulnerability allows for arbitrary script injection when certain settings are enabled, potentially leading to account hijacking and site takeover. The issue was fixed in version 6.5.1, but site admins should act quickly to secure their websites.