LT
Vendor
LiteSpeed Technologies
25
CVEs
3
On KEV
0
New 30D
Products
CP9.8
cPanel Plugin
LiteSpeed Technologies
2 CVEs2 on KEV0 new
WP9.8
WHM Plugin
LiteSpeed Technologies
1 CVEs1 on KEV0 new
LC9.8
LiteSpeed Cache
LiteSpeed Technologies
11 CVEs0 on KEV0 new
LW8.8
LiteSpeed Web Server
LiteSpeed Technologies
5 CVEs0 on KEV0 new
OW8.8
OpenLiteSpeed Web Server
LiteSpeed Technologies
3 CVEs0 on KEV0 new
OP7.2
OpenLiteSpeed
LiteSpeed Technologies
2 CVEs0 on KEV0 new
LE7.2
LSWS Enterprise
LiteSpeed Technologies
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-84761 | LC LiteSpeed Cache LiteSpeed Technologies | 7.2 | Sep 3 | WordPress LiteSpeed Cache plugin <= 7.9 - Server Side Request Forgery (SSRF) vulnerability |
| CVE-2026-54420 In wildKEV | CP cPanel Plugin LiteSpeed Technologies | 8.5 | Jun 14 | LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability |
| CVE-2026-48172 In wildKEV | CP cPanel Plugin LiteSpeed Technologies | 9.8 | May 21 | LiteSpeed cPanel Plugin Privilege Escalation Vulnerability |
| CVE-2026-31386 | LE LSWS Enterprise LiteSpeed Technologies | 7.2 | Mar 16 | OpenLiteSpeed and LSWS Enterprise provided by LiteSpeed Technologies contain an OS command injection vulnerability |
| CVE-2024-51915 | LC LiteSpeed Cache LiteSpeed Technologies | 6.5 | Feb 20 | WordPress LiteSpeed Cache plugin <= 6.5.2 - Cross Site Scripting (XSS) vulnerability |
| CVE-2021-47855 | OP OpenLiteSpeed LiteSpeed Technologies | 7.2 | Jan 21 | Openlitespeed 1.7.9 - 'Notes' Stored Cross-Site Scripting |
| CVE-2025-47437 | LC LiteSpeed Cache LiteSpeed Technologies | 6.4 | Sep 9 | WordPress LiteSpeed Cache plugin <= 7.0.1 - Server Side Request Forgery (SSRF) vulnerability |
| CVE-2024-50550 | LC LiteSpeed Cache LiteSpeed Technologies | 9.8 | Oct 29 | WordPress LiteSpeed Cache plugin <= 6.5.1 - Privilege Escalation vulnerability |
| CVE-2024-44000 | LC LiteSpeed Cache LiteSpeed Technologies | 9.8 | Oct 20 | WordPress LiteSpeed Cache plugin < 6.5.0.1 - Unauthenticated Account Takeover via Cookie Leak vulnerability |
| CVE-2024-47637 | LC LiteSpeed Cache LiteSpeed Technologies | 8.8 | Oct 16 | WordPress LiteSpeed Cache plugin <= 6.4.1 - Path Traversal vulnerability |
| CVE-2024-47373 | LC LiteSpeed Cache LiteSpeed Technologies | 5.4 | Oct 5 | WordPress LiteSpeed Cache plugin <= 6.5.0.2 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-47374 | LC LiteSpeed Cache LiteSpeed Technologies | 6.1 | Oct 5 | WordPress LiteSpeed Cache plugin <= 6.5.0.2 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-28000 | LC LiteSpeed Cache LiteSpeed Technologies | 9.8 | Aug 21 | WordPress LiteSpeed Cache plugin <= 6.3.0.1 - Unauthenticated Privilege Escalation vulnerability |
| CVE-2023-45000 | LC LiteSpeed Cache LiteSpeed Technologies | 5.3 | Apr 16 | WordPress LiteSpeed Cache plugin <= 5.7 - Unauthenticated Broken Access Control on API vulnerability |
| CVE-2023-40000 | LC LiteSpeed Cache LiteSpeed Technologies | 6.1 | Apr 16 | WordPress LiteSpeed Cache plugin <= 5.7 - Unauthenticated Site Wide Stored XSS vulnerability |
| CVE-2022-0074 | OW OpenLiteSpeed Web Server LiteSpeed Technologies | 8.8 | Oct 27 | Privilege Escalation in OpenLiteSpeed Web Server |
| CVE-2022-0073 | OW OpenLiteSpeed Web Server LiteSpeed Technologies | 8.8 | Oct 27 | Authenticated Remote Code Execution in OpenLiteSpeed Web Server |
| CVE-2022-0072 | OW OpenLiteSpeed Web Server LiteSpeed Technologies | 5.8 | Oct 27 | Directory Traversal in OpenLiteSpeed Web Server |
| CVE-2007-5654 | LW Litespeed Web Server Litespeed Technologies | – | Oct 23 | LiteSpeed Web Server before 3.2.4 allows remote attackers to trigger use of an arbitrary MIME type for a file via a "%00." sequence followed by a new extension, as demonstrated by… |
| CVE-2005-3695 | LW Litespeed Web Server Litespeed Technologies | – | Nov 20 | Cross-site scripting (XSS) vulnerability in admin/config/confMgr.php in LiteSpeed Web Server 2.1.5 allows remote attackers to inject arbitrary web script or HTML via the m… |