Critical Vulnerability in LiteSpeed Cache Plugin Allows Website Takeover

A critical vulnerability, CVE-2024-44000, has been identified in the LiteSpeed Cache plugin, which is used by over 6 million WordPress sites. This flaw permits unauthorized users to gain control over any user account. The issue arises from the plugin’s potential to erroneously log sensitive data, such as login cookies, in a debug log file after a login attempt.