CVE-2024-50550: WordPress LiteSpeed Cache plugin <= 6.5.1 - Privilege Escalation vulnerability
Published Oct 29, 2024
·Updated
Incorrect Privilege Assignment vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache allows Privilege Escalation.This issue affects LiteSpeed Cache: from n/a through <= 6.5.1.
Affected Software
3 affected components
Litespeed Technologies LiteSpeed Cache<=6.5.1
Litespeed Technologies LiteSpeed Cache (WordPress Plugin)<=6.5.1
Litespeedtech Litespeed Cache Wordpress<6.5.2
Remediation
Information
Update to 6.5.2 or a higher version.
Event History
Oct 29, 2024
CVE Published
via MITRE·09:57 AM
Data Sourced
via MITRE·09:57 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:15 AM
DescriptionSeverityWeaknessAffected Software
Oct 31, 2024
News Published
via BleepingComputer·04:19 PM
News Published
via BleepingComputer·04:46 PM
Frequently Asked Questions
1
What is the severity of CVE-2024-50550?
CVE-2024-50550 has a high severity rating due to its potential for privilege escalation.
2
How do I fix CVE-2024-50550?
To fix CVE-2024-50550, upgrade LiteSpeed Cache to version 6.5.2 or later.
3
What impact does CVE-2024-50550 have on my system?
CVE-2024-50550 allows unauthorized users to gain administrative privileges on LiteSpeed Cache.
4
Is CVE-2024-50550 applicable to all versions of LiteSpeed Cache?
CVE-2024-50550 affects LiteSpeed Cache versions up to and including 6.5.1.
5
Does CVE-2024-50550 affect WordPress sites?
Yes, CVE-2024-50550 also affects the LiteSpeed Cache WordPress plugin up to version 6.5.1.