CVE-2026-113499 | LiteSpeed Cache Plugin up to 7.9.1 on WordPress HTML Rewriting HTML injection

October 23, 2026 Yanac

A vulnerability categorized as problematic has been discovered in LiteSpeed Cache Plugin up to 7.9.1 on WordPress. Affected by this issue is some unknown functionality of the component HTML Rewriting. The manipulation results in HTML injection.

This vulnerability is known as CVE-2026-113499. It is possible to launch the attack remotely. No exploit is available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More