Live › vulnerability › CVE-2026-114190
Go to dashboardLiteSpeed Cache, a WordPress caching plugin, inserts sensitive information into data it sends out, so a remote party can retrieve embedded secrets. The advisory affects all versions through 7.9.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-24 08:47 UTC. All times on this page are UTC.
Sites running the LiteSpeed Cache WordPress plugin at version 7.9 or earlier are in scope, according to the NVD entry. The sources do not describe the exact data path or configuration needed, so unknown whether default installs are exposed.
No product ranges from the sources yet.
wp plugin get litespeed-cache --field=version7.9, once the vendor publishes a fixed version; the sources do not name itEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Insertion of Sensitive Information Into Sent Data vulnerability in Hai Zheng / Lite Speed Cache LiteSpeed Cache litespeed-cache allows Retrieve Embedded Sensitive Data.This issue affects LiteSpeed Cache: from n/a through 7.9.
This page as .md · .json · in your agent: get_signal("CVE-2026-114190")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.