LiteSpeed Cache Plugin Vulnerability Affects Over 5 Million Websites

A critical vulnerability has been discovered in the LiteSpeed Cache WordPress plugin, identified as CVE-2024-28000. This flaw could allow attackers to take control of millions of websites by creating rogue admin accounts. The vulnerability, classified as an unauthenticated privilege escalation, is rooted in the plugin’s user simulation feature, which can be exploited by threat actors to escalate their privileges and gain unauthorized access to a website’s administrative functions.