Vulnerability in Litespeedtech Litespeed Cache
CVSS score
9.8
EPSS probability
%68.3
Risk score
6.7
Published
2 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
Hands-on reproduction of CVE-2024-28000 in LiteSpeed Cache using an isolated WordPress lab. Includes reconnaissance, vulnerable hash recovery, Administrator privilege escalation proof, cleanup, and remediation-focused documentation.
Hands-on exploit lab for CVE-2024-28000 — unauthenticated privilege escalation in LiteSpeed Cache (WordPress plugin, <=6.3.0.1). Spins up a vulnerable environment with Docker and includes a Go-based brute-forcer that cracks the weak mt_rand hash to create an administrator account.
LiteSpeed Cache Privilege Escalation PoC - CVE-2024-28000
PoC for the CVE-2024 Litespeed Cache Privilege Escalation
CVE-2024-28000 Exploit for litespeed-cache =<6.3 allows Privilege Escalation with creation of administrator account
CVE-2024-28000 LiteSpeed Cache Privilege Escalation Scan&Exp
Litespeed Cache WordPress Plugin 6.3.0.1 - Privilege Escalation
Nuclei: WordPress LiteSpeed Cache - Unauthenticated Privilege Escalation to Admin
Similar Vulnerabilities
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2024-28000"