Are you running a WordPress site with the Litespeed Cache
\nplugin? <\/b>You could be vulnerable to a serious security risk. Millions of
\nwebsites may be at risk of takeover due to a critical vulnerability found in
\nthis popular plugin.<\/p>\n
Litespeed Cache is a widely-used plugin designed to improve
\nwebsite performance by caching content. With over 5 million active
\ninstallations, it\u2019s a go-to tool for many WordPress users. However, a recent
\ndiscovery by security researcher John Blackbourn revealed a critical flaw that
\ncould allow attackers to gain administrator access to WordPress sites without
\nneeding to log in.<\/p>\n
The vulnerability, tracked as CVE-2024-28000, is a privilege
\nescalation flaw. This means that an attacker can elevate their access level,
\ngiving them administrator privileges, which could allow them to take complete
\ncontrol of a targeted site. The discovery was responsibly reported through the
\nbug bounty program run by WordPress security firm Patchstack, earning
\nBlackbourn a reward of $14,400 for identifying the issue.<\/p>\n
Upon being notified of the vulnerability on August 5, the
\ndevelopers of Litespeed Cache quickly acted and released a patched version
\n(6.4) on August 13. However, while the patch is available, not all users have
\nupdated their plugins. Data from WordPress.org shows that around 3 million
\nusers have downloaded the update since its release, leaving approximately 2
\nmillion websites still exposed to potential attacks.<\/p>\n
What makes this vulnerability particularly concerning is how
\nit operates. The flaw exploits a feature in the plugin that simulates user
\nactions, which is protected by a weak security hash. This hash uses known
\nvalues, making it easier for attackers to crack. If an attacker can obtain this
\nhash, they can create a new user account with administrator privileges. This
\nwould enable them to deploy malware or make other malicious changes to the
\nsite.<\/p>\n
The situation is further complicated by the fact that the
\nsecurity hash only has 1 million possible values, making it susceptible to
\nbrute-force attacks. Patchstack estimates that such an attack could take
\nanywhere from a few hours to a week to succeed. Additionally, if the site has
\ndebugging mode enabled, the hash might be leaked in logs, providing another
\npotential attack vector.<\/p>\n
While this vulnerability may not be easy to exploit on a
\nlarge scale, Patchstack CEO Oliver Sild warns that it could be used in targeted
\nattacks. For hackers looking to take over a specific website, this flaw
\nprovides a relatively straightforward method to gain full access. Defiant,
\nanother WordPress security firm, has echoed these concerns, stating that they
\nexpect the vulnerability to be actively exploited soon.<\/p>\n
If you\u2019re using the Litespeed Cache plugin, it\u2019s crucial to
\nupdate to the latest version immediately. Keeping your plugins up to date is a
\ncritical step in securing your website and protecting it from potential
\nthreats.<\/p>\n","protected":false},"excerpt":{"rendered":"
Are you running a WordPress site with the Litespeed Cache plugin? You could be vulnerable to a serious security risk. Millions of websites may be at risk of takeover due […]<\/p>\n","protected":false},"author":1,"featured_media":276,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"categories":[],"tags":[],"class_list":["post-277","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry"],"_links":{"self":[{"href":"https:\/\/qld.cybersafebusiness.au\/index.php\/wp-json\/wp\/v2\/posts\/277","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/qld.cybersafebusiness.au\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/qld.cybersafebusiness.au\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/qld.cybersafebusiness.au\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/qld.cybersafebusiness.au\/index.php\/wp-json\/wp\/v2\/comments?post=277"}],"version-history":[{"count":0,"href":"https:\/\/qld.cybersafebusiness.au\/index.php\/wp-json\/wp\/v2\/posts\/277\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/qld.cybersafebusiness.au\/index.php\/wp-json\/wp\/v2\/media\/276"}],"wp:attachment":[{"href":"https:\/\/qld.cybersafebusiness.au\/index.php\/wp-json\/wp\/v2\/media?parent=277"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/qld.cybersafebusiness.au\/index.php\/wp-json\/wp\/v2\/categories?post=277"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/qld.cybersafebusiness.au\/index.php\/wp-json\/wp\/v2\/tags?post=277"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}