CVE-2024-28000

Severity

CRITICAL

CVSS

9.8

EPSS

0.68266

Risk score

63.09

CISA KEV

PoC

Yes

Published

2024-08-21

Modified

2026-04-29

First seen

2026-08-07

Aliases

EUVD-2024-25174, GHSA-3CP9-7899-H8R7

Products

litespeedtech:LiteSpeed Cache 0 ≤6.3.0.1

Sources

github 8d1d36a795ab6df2b739343c|CVE-2024-28000
euvd EUVD-2024-25174

Description

Incorrect Privilege Assignment vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache.This issue affects LiteSpeed Cache: from n/a through <= 6.3.0.1.

References

https://github.com/AliHzSec/CVE-2024-28000
https://raw.githubusercontent.com/AliHzSec/CVE-2024-28000/master/README.md
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-25174
https://patchstack.com/database/Wordpress/Plugin/litespeed-cache/vulnerability/wordpress-litespeed-cache-plugin-6-3-0-1-unauthenticated-privilege-escalation-vulnerability?_s_id=cve