Multiple XSS vulnerabilities patched in WordPress plugins October 2026
Sucuri publishes October 2026 roundup of medium and high-risk flaws in Elementor, LiteSpeed Cache, and WooCommerce.
70
Product
LiteSpeed Cache
- Mentions · 7d1
- Mentions · 30d1
- All mentions3
- First seenAug 28, 2026
- Last mentioned3d ago
Timeline
3 articles · newest firstPhilippine Nuclear and Naval Targets Hit by Suspected Chinese Operator
Suspected Chinese-speaking operator breached Philippine nuclear research and naval supplier systems via ownCloud CVE-2023-49103 and WordPress CVE-2024-28000.
72
ownCloud Flaw Exploited to Steal Nuclear Records From Philippine Research Body
A Chinese-speaking actor exploited ownCloud CVE-2023-49105 to steal 176 nuclear research files from Philippine organizations, prompting CISA to add the flaw to KEV.
75
Related CVEs
by mentions- CVE-2024-2800068%9.8Incorrect Privilege Assignment vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache.This issue affects LiteSpeed Cache
- CVE-2023-4910543%9.8Improper Authentication in ownCloud Server Allows Unauthenticated File Access
- CVE-2026-53362<1%7.8Out-of-Bounds Write in Linux Kernel IPv6 Stack via UDPv6 MSG_SPLICE_PAGES
- CVE-2026-66384<1%5.3Authenticated Path Traversal Write in JFrog Artifactory Exploited in the Wild
- Stored XSS in LiteSpeed Cache before 7.9.2
- XSS in SVG upload in Elementor Website Builder before 4.3.5
- Stored XSS in LiteSpeed Cache WordPress plugin before 7.9.1
- Sensitive Data Exposure in LiteSpeed Cache before 7.9
- Stored XSS in LiteSpeed Cache WordPress plugin up to 7.9.1
- Reflected XSS in WPForms before 2.0.2.1
Appears with
- Philippine nuclear research bodyvictim · 2
- ownCloudvendor · 2
- ZKTeco BioTimeproduct · 2
- LiteSpeedvendor · 2
- Hunt.ioorganization · 2
- ZKTecovendor · 2
- Elementor Website Builderproduct · 1
- ownCloudproduct · 1
- Slivermalware · 1
- CERT-PHorganization · 1
- Philippine marine engineering and shipbuilding companyvictim · 1
- Mettlemalware · 1
- Rank Math SEOproduct · 1
- WordPressvendor · 1
- OpenAIorganization · 1
- WooCommerceproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.