Severity
High
Analysis Summary
CVE-2023-40000
WordPress LiteSpeed Cache plugin is vulnerable to cross-site scripting vulnerability that may lead to privilege escalation. This may allow an unauthenticated user to steal sensitive information and elevate their privilege on the WordPress site by performing a single HTTP request.
Impact
- Privilege Escalation
- Information Theft
- Cross-Site Scripting
Indicators of Compromise
CVE
- CVE-2023-40000
Affected Vendors
WordPress
Affected Products
- WP LiteSpeed Cache Prior to 5.7.0.1 for WordPress
Remediation
Upgrade to latest version of Plugin for WordPress, available from WordPress Plugin Directory,