Incorrect Privilege Assignment in LiteSpeed Technologies LiteSpeed Cache plugin for WordPress
| Risk | High |
| Patch available | YES |
| Number of vulnerabilities | 1 |
| CVE-ID | CVE-2024-28000 |
| CWE-ID | CWE-266 |
| Exploitation vector | Network |
| Public exploit | Public exploit code for vulnerability #1 is available. |
| Vulnerable software Subscribe |
LiteSpeed Cache Web applications / Modules and components for CMS |
| Vendor | LiteSpeed Technologies |
Security Bulletin
This security bulletin contains one high risk vulnerability.
1) Incorrect Privilege Assignment
EUVDB-ID: #VU96486
Risk: High
CVSSv3.1: 8.8 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C]
CVE-ID: CVE-2024-28000
CWE-ID:
CWE-266 - Incorrect Privilege Assignment
Exploit availability: Yes
DescriptionThe vulnerability allows a remote attacker to escalate privileges on the system.
The vulnerability exists due to a weak security hash in a user simulation feature. A remote attacker can gain elevated privileges on the target system.
MitigationInstall updates from vendor's website.
Vulnerable software versionsLiteSpeed Cache: 1.0.15 - 6.3.0.1
External linkshttp://patchstack.com/database/vulnerability/litespeed-cache/wordpress-litespeed-cache-plugin-6-3-0-1-unauthenticated-privilege-escalation-vulnerability?_s_id=cve
http://patchstack.com/articles/critical-privilege-escalation-in-litespeed-cache-plugin-affecting-5-million-sites?_s_id=cve
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.
