Attackers Exploit LiteSpeed Cache XSS Flaw in WordPress Sites
Active Exploitation · 2 sources · Updated 3mo ago · First seen Jun 14, 2024
Security monitoring in Japan recorded a rise in exploitation attempts against CVE-2023-40000, an unauthenticated stored cross-site scripting flaw in the WordPress LiteSpeed Cache plugin. The vulnerability affects versions earlier than 5.7.0.1 and can be abused through the _msg parameter of the /wp-json/litespeed/v1/cdn_status endpoint, allowing attackers to inject malicious script content into WordPress files or databases.
Researchers said successful exploitation could also enable attackers to create administrator accounts, increasing the risk of full site compromise. Observed activity increased sharply from May 21, with many attack sources traced to the Netherlands and Switzerland, and defenders were urged to update LiteSpeed Cache to version 5.7.0.1 or later immediately.
