CVE-2024-28000

CVSS 3.1: 9.8 critical
EPSS: 68%p99
Published: Aug 21, 2024 · Aug 21, 2024
Modified: Jun 17, 2026

Analyze CVE-2024-28000 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Incorrect Privilege Assignment vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache.This issue affects LiteSpeed Cache: from n/a through <= 6.3.0.1.

Vendors: litespeedtech

Products: litespeed cache

Ecosystems: WordPress

Weakness: CWE-266

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (68.3%)

In the news

5 stories

ownCloud Flaw Exploited to Steal Nuclear Records From Philippine Research Body

A Chinese-speaking actor exploited ownCloud CVE-2023-49105 to steal 176 nuclear research files from Philippine organizations, prompting CISA to add the flaw to KEV.

The Hacker NewsAug 28, 15:56 UTC · Aug 28, 2026Exploit / PoCExploitedCVE-2023-49105 CVE-2024-28000 CVE-2026-53362+14 · 2 reads

Philippine Nuclear and Naval Targets Hit by Suspected Chinese Operator

Suspected Chinese-speaking operator breached Philippine nuclear research and naval supplier systems via ownCloud CVE-2023-49103 and WordPress CVE-2024-28000.

Security AffairsAug 29, 09:16 UTC · Aug 29, 2026Threat actorExploitedCVE-2024-280002 · 1 read

LiteSpeed Cache Plugin Vulnerability Poses Significant Risk to WordPress Websites

The Hacker NewsOct 31, 10:24 UTC · Oct 31, 2024VulnerabilityCVE-2024-50550 CVE-2024-28000 CVE-2024-44000+32

Critical Security Flaw Found in LiteSpeed Cache Plugin for WordPress

The Hacker NewsSep 6, 06:35 UTC · Sep 6, 2024VulnerabilityCVE-2024-44000 CVE-2024-280001 · 1 read

Critical Flaw in WordPress LiteSpeed Cache Plugin Allows Hackers Admin Access

The Hacker NewsAug 23, 04:12 UTC · Aug 23, 2024VulnerabilityExploitedCVE-2024-28000 CVE-2023-400001