Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Priority LOW 14

The LiteSpeed Cache WordPress plugin before 7.9.2 does not perform a capability check on its admin-notice dismissal handler, and the nonce it relies on is not bound to the specific notice being dismissed, so on sites in…

CVSS 3.1LOW 3.1 Network Low privileges No interaction EPSS 0.00187 Published 2026-10-23 Fixed in 7.9.2 CWE-862
Priority LOW 35

The LiteSpeed Cache WordPress plugin before 7.9.2 does not limit one of its HTML optimization routines to stylesheet content, so it can delete the markup that closes an attribute in the rendered page, and combined with u…

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00304 Published 2026-10-23 Fixed in 7.9.2 CWE-79
Priority LOW 35

The LiteSpeed Cache WordPress plugin before 7.9.2 does not restrict one of its HTML rewriting routines to stylesheet content, so it removes a quote that terminates an attribute in the rendered page, and combined with une…

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00304 Published 2026-10-23 Fixed in 7.9.2 CWE-79