CVE-2026-114190: WordPress LiteSpeed Cache plugin <= 7.9 - Sensitive Data Exposure vulnerability
Insertion of Sensitive Information Into Sent Data vulnerability in Hai Zheng / Lite Speed Cache LiteSpeed Cache litespeed-cache allows Retrieve Embedded Sensitive Data.This issue affects LiteSpeed Cache: from n/a through 7.9.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress LiteSpeed Cache pluginto a version that resolves this vulnerability.Fixed in 7.9.1
Event History
Frequently Asked Questions
Who can exploit this issue?
The vector is network-based and no privileges or user interaction are required. Exploitation has high attack complexity, so additional unspecified conditions are needed.
What is the potential impact?
Successful exploitation may expose sensitive information. The available scoring indicates high confidentiality impact, with no integrity or availability impact.
Which LiteSpeed Cache versions are affected?
LiteSpeed Cache versions through 7.9 are affected; the lower bound is not specified.