CVE-2024-44000

Severity

CRITICAL

CVSS

9.8

EPSS

0.82143

Risk score

67.95

CISA KEV

PoC

Published

2024-10-20

Modified

2026-04-28

First seen

2026-08-07

Aliases

EUVD-2024-40782, GHSA-RH5M-MW2H-V9RV

Products

litespeedtech:LiteSpeed Cache 0 ≤6.5.0.1

Sources

euvd EUVD-2024-40782

Description

Insufficiently Protected Credentials vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache allows Authentication Bypass.This issue affects LiteSpeed Cache: from n/a through < 6.5.0.1.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-40782
https://patchstack.com/database/Wordpress/Plugin/litespeed-cache/vulnerability/wordpress-litespeed-cache-plugin-6-5-0-1-unauthenticated-account-takeover-vulnerability?_s_id=cve