#litespeed-cache — Public Fediverse posts

#Wordpress-Plug-in: Abermals gravierende Sicherheitslücke in #LitespeedCache | Security https://www.heise.de/news/Wordpress-Plug-in-Abermals-gravierende-Sicherheitsluecke-in-Litespeed-Cache-9975165.html #WordPressPlugIn #CMS #ContentManagementSystem #Patchday

#WordPress-Plug-in #LiteSpeedCache erneut angreifbar | Security https://www.heise.de/news/WordPress-Plug-in-LiteSpeed-Cache-erneut-angreifbar-9859538.html #WordPressPlugin #Patchday

encore et encore...

🩹 LiteSpeed Release v6.5.0.1 ( chagelog https://plugins.trac.wordpress.org/changeset/3146657/litespeed-cache/trunk )

"Critical Account Takeover Vulnerability Patched in LiteSpeed Cache Plugin"
👇
https://patchstack.com/articles/critical-account-takeover-vulnerability-patched-in-litespeed-cache-plugin/
⬇️
"LiteSpeed Cache bug exposes 6 million WordPress sites to takeover attacks

Yet, another critical severity vulnerability has been discovered in LiteSpeed Cache, a caching plugin for speeding up user browsing in over 6 million WordPress sites.

The flaw, tracked as CVE-2024-44000 and categorized as an unauthenticated account takeover issue, was discovered by Patchstack's Rafie Muhammad on August 22, 2024. A fix was made available yesterday with the release of LiteSpeed Cache version 6.5.0.1."
👇
https://www.bleepingcomputer.com/news/security/litespeed-cache-bug-exposes-6-million-wordpress-sites-to-takeover-attacks/

#CyberVeille #WordPress #LiteSpeedCache #CVE_2024_44000

5 Millionen #Wordpress-Seiten gefährdet: Kritisches Leck in #LiteSpeedCache | Security https://www.heise.de/news/5-Millionen-Wordpress-Seiten-gefaehrdet-Kritisches-Leck-in-LiteSpeed-Cache-9843667.html #Patchday #WordPressPlugin

#WordPress の人気プラグイン「#LiteSpeedCache」に重大な脆弱性があることが判明、数百万ものウェブサイトが乗っ取られる可能性も - GIGAZINE https://gigazine.net/news/20240823-wordpress-litespeed-cache-plugin-vulnerability/

#WordPress の人気プラグイン「#LiteSpeedCache」に重大な脆弱性があることが判明、数百万ものウェブサイトが乗っ取られる可能性も - GIGAZINE https://gigazine.net/news/20240823-wordpress-litespeed-cache-plugin-vulnerability/

WordPress LiteSpeed Cache Plugin Vulnerability Gives Hackers Admin Control
Are you a WordPress user who relies on the LiteSpeed Cache plugin to keep your site running smoothly and efficiently? Well, you might want to pay attention to this latest development.
#WordPressSecurity #LiteSpeedCache #PluginVulnerability #CyberSecurity #HackerAlert #AdminControl #WebsiteSafety #WordPressHacks #OnlineSecurity #TechNews
https://cloudhosting.evostrix.eu/wordpress-litespeed-cache-plugin-vulnerability-gives-hackers-admin-control/

Record-Breaking Bounty Awarded for LiteSpeed Cache Plugin Vulnerability #Litespeedcache #Wordpress #Plugin #Patchstack #Litespeed
https://ostechnix.com/litespeed-cache-plugin-vulnerability/

Record-Breaking Bounty Awarded for LiteSpeed Cache Plugin Vulnerability #Litespeedcache #Wordpress #Plugin #Patchstack #Litespeed
https://ostechnix.com/litespeed-cache-plugin-vulnerability/

If you use the #LiteSpeedCache plugin for #Wordpress: UPDATE!
Wordfence found that it was possible for an unauthenticated attacker to spoof their user ID in vulnerable versions, ultimately allowing them to register as an administrative-level user and completely take over a WordPress site.
https://www.wordfence.com/blog/2024/08/over-5000000-site-owners-affected-by-critical-privilege-escalation-vulnerability-patched-in-litespeed-cache-plugin/

If you use the #LiteSpeedCache plugin for #Wordpress: UPDATE!
Wordfence found that it was possible for an unauthenticated attacker to spoof their user ID in vulnerable versions, ultimately allowing them to register as an administrative-level user and completely take over a WordPress site.
https://www.wordfence.com/blog/2024/08/over-5000000-site-owners-affected-by-critical-privilege-escalation-vulnerability-patched-in-litespeed-cache-plugin/

#wordpress #litespeedcache Urgent announcement by Wordfence today. "We strongly advise users to update their [Wordpress] sites with the latest patched version of Litespeed Cache, version 6.4.1 at the time of this writing, as soon as possible."

LiteSpeed Cache Plugin XSS Vulnerability Affects 1.8M WordPress Sites https://www.hackread.com/litespeed-cache-plugin-xss-vulnerability-wordpress-sites/ #LiteSpeedCache #Cybersecurity #Vulnerability #Wordpress #Security #Malware #Plugin #XSS

LiteSpeed Cache Plugin XSS Vulnerability Affects 1.8M WordPress Sites https://www.hackread.com/litespeed-cache-plugin-xss-vulnerability-wordpress-sites/ #LiteSpeedCache #Cybersecurity #Vulnerability #Wordpress #Security #Malware #Plugin #XSS

#EducateMePlease about #LiteSpeedCache.

https://www.bleepingcomputer.com/news/security/hackers-exploit-litespeed-cache-flaw-to-create-wordpress-admins/

Is this something that's built into every* #WordPress installation? Could my WP site be affected?

I've been getting quite a number of attempted* #logins by losers with no honor or higher purpose and with nothing better to do with their sad lives.

So far I don't notice any weird signs of actual intrusion... But maybe I'm just too clueless to notice. 🧐 #NotATechie #websites #blogs

#EducateMePlease about #LiteSpeedCache.

https://www.bleepingcomputer.com/news/security/hackers-exploit-litespeed-cache-flaw-to-create-wordpress-admins/

Is this something that's built into every* #WordPress installation? Could my WP site be affected?

I've been getting quite a number of attempted* #logins by losers with no honor or higher purpose and with nothing better to do with their sad lives.

So far I don't notice any weird signs of actual intrusion... But maybe I'm just too clueless to notice. 🧐 #NotATechie #websites #blogs

@pfefferle @tim Found the problem!

The ActivityPub plugin returns activitystream json regardless of the case of the Accept header. (So application/json and application/JSON will both work.)

However, Tim's RewriteCond is case sensitive, so only the correctly formatted application/json header will trigger the vary fix.

Slapping [NC] at the end of the RewriteCond does the job.

#activitypub #wordpress #litespeedcache

I'm wondering what are the best settings for #rankmath and #litespeedcache

👉Empieza a utilizar #LitespeedCaché en un servidor que no sea LiteSpeed Web Server
https://my.mtr.cool/cuzghfevlb

👉Empieza a utilizar #LitespeedCaché en un servidor que no sea LiteSpeed Web Server
https://my.mtr.cool/ddktmuiltj