CVE-2024-44000
WordPress LiteSpeed Cache plugin < 6.5.0.1 - Unauthenticated Account Takeover via Cookie Leak vulnerability
CRITICAL 9.8EPSS 82.3%
Insufficiently Protected Credentials vulnerability in LiteSpeed Technologies LiteSpeed Cache allows Authentication Bypass.This issue affects LiteSpeed Cache: from n/a before 6.5.0.1.
- Affected
- LiteSpeed Technologies · LiteSpeed Cache
- CVSS v3.1 NVD
- 9.8 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS
- 82.34% chance of exploitation in the next 30 days, 100th percentile
- Nuclei
- high · CWE-532
- Published
- 2024-10-20
- Updated
- 2026-04-28
Proof-of-concept exploits (5)
- absholi7ly/CVE-2024-44000-LiteSpeed-Cache16★ · 2024-09-06
- gbrsh/CVE-2024-440000★ · 2024-09-06
- geniuszly/CVE-2024-440005★ · 2024-10-10
- geniuszlyy/CVE-2024-440005★ · 2024-10-10
- ifqygazhar/CVE-2024-44000-LiteSpeed-Cache3★ · 2024-09-16