CVE-2023-45000

WordPress LiteSpeed Cache plugin <= 5.7 - Unauthenticated Broken Access Control on API vulnerability

Missing Authorization vulnerability in LiteSpeed Technologies LiteSpeed Cache.This issue affects LiteSpeed Cache: from n/a through 5.7.

We have discovered 98,111 live websites that are affected by CVE-2023-45000.

Test my site



Affected Software

Product  Litespeed Cache
Category Cache Tools
Vulnerable Domains98,111 live websites (10.69% of Litespeed Cache install base)
Vulnerable Versions
  • from 0 through 5.7
Vulnerable Versions Count136 versions ( 87.18% of all versions)


Common Weakness Enumeration

CWE-862 Missing Authorization



Details

  • Published - Apr 16, 2024
  • Updated - Aug 2, 2024

Credits

  • Rafie Muhammad (Patchstack) (finder)

CVE-2023-45000 usage by Country

United States31,291 websites


Poland7,956 websites
Turkey6,448 websites
GB5,230 websites
France4,767 websites
Germany4,721 websites
Spain4,002 websites
Canada3,650 websites
Vietnam2,751 websites
Romania2,601 websites

CVE-2023-45000 usage by TLD

.com44,914 websites
.pl6,277 websites
.org4,002 websites
.net2,870 websites
.co.uk2,349 websites
.com.br2,308 websites
.com.au2,006 websites
.ca1,688 websites
.es1,684 websites
.nl865 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2023-45000

Top websites that are affected by CVE-2023-45000. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
*******.fm United States*,***
*********.com United States**,***
******.com United States**,***
**************.org United States**,***
*******.org United States**,***
*******.ly United States**,***
**********.com United States**,***
***********.net Turkey**,***
*********************.com United States**,***
***************.com United States**,***
See full domain list

FAQ

CVE-2023-45000 is Missing Authorization in Litespeed Cache
A total of 98,111 websites have been identified as vulnerable to CVE-2023-45000, discovered through global website indexing conducted by WebTechSurvey.
Litespeed Cache is susceptible to CVE-2023-45000 vulnerability.
Litespeed Cache versions before, and including, 5.7 are vulnerable to CVE-2023-45000.