CVE-2024-50550 PoC — WordPress LiteSpeed Cache plugin <= 6.5.1 - Privilege Escalation vulnerability

Source

https://github.com/AleksaZatezalo/CVE-2024-50550

Associated Vulnerability

Title:WordPress LiteSpeed Cache plugin <= 6.5.1 - Privilege Escalation vulnerability (CVE-2024-50550)
Description:Incorrect Privilege Assignment vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache allows Privilege Escalation.This issue affects LiteSpeed Cache: from n/a through <= 6.5.1.

Readme

# CVE-2024-50550

CVE-2024-50550 is an Incorrect Privilege Assignment vulnerability in LiteSpeed Technologies' LiteSpeed Cache Wordpress Plugin. It affects all issues of LiteSpeed Cache up to 6.5.1. This could allow a malicious actor to escalate their low privileged account. They could take full control of the website if administrative privileges are gained.

## References

[NIST Website | CVE-2024-50550](https://nvd.nist.gov/vuln/detail/CVE-2024-50550)

[PatchStack | Rare case of privilege escalation patched in litespeed cache plugin](https://patchstack.com/articles/rare-case-of-privilege-escalation-patched-in-litespeed-cache-plugin/)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →