WordPress plugin LiteSpeed Cache vulnerability has put millions of websites at risk

A popular WordPress plugin, LiteSpeed Cache, was found to have a cross-site scripting vulnerability that could allow threat actors to steal sensitive information and escalate privileges on websites. The plugin, which has over four million active installations, is designed to improve website performance. The vulnerability, described as a “site-wide stored XSS” flaw, can be exploited by performing a single HTTP request. Since the discovery, LiteSpeed Cache’s developers have released a patch. Users are advised to update their plugins to at least version 5.7.0.1 to secure their websites from potential attackers.

Read more at: https://www.techradar.com