LiteSpeed has published an advisory for a flaw in its LiteSpeed Cache plugin for WordPress. On sites with a specific setup, it can let an unauthenticated attacker retrieve data that normally requires administrator access. The fix shipped in version 7.9.1 on September 1. According to LiteSpeed’s October 28 advisory, an exposed response stays cached for the … Continue reading LiteSpeed Cache Flaw Can Leave Admin-Level REST Data Exposed for a Week