CVE · Medium

CVE-2022-46800 — LiteSpeed Cache [litespeed-cache] < 5.3.1

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2022-46800 LiteSpeed Cache [litespeed-cache] < 5.3.1 Cross-Site Request Forgery (CSRF) Medium 5.4 < 5.3.1 5.3.1 2023-03-22

CVE-2022-46800

The LiteSpeed Cache WordPress plugin versions prior to 5.3.1 contain a cross-site request forgery flaw that permits attackers to trick authenticated users with elevated privileges into performing unintended actions while logged in. A researcher named thiennv identified and disclosed this vulnerability. The issue has been resolved in version 5.3.1 and administrators should update their installations immediately.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.