CVE-2023-45000

The LiteSpeed Cache plugin for WordPress contained a broken access control vulnerability in versions prior to 5.7.0.1 that allowed unauthorized users to perform actions typically restricted to privileged accounts. The flaw stemmed from missing authorization and nonce verification checks in certain functions, enabling attackers to bypass security restrictions. Researcher Rafie Muhammad discovered and reported this issue through Patchstack. Users should upgrade to version 5.7.0.1 or later to remediate the vulnerability.

Based on public CVE data (MITRE/NVD).