Skip to content
Threat Feed
Subscribe

Product

LiteSpeed Cache (<= 7.9.1)

1 brief RSS
high advisory

LiteSpeed Cache: Unauthenticated WooCommerce data disclosure (CVE-2026-93389)

The LiteSpeed Cache plugin for WordPress up to version 7.9.1 contains an information disclosure vulnerability that allows unauthenticated attackers to access sensitive WooCommerce customer data and session tokens via improper public caching of REST API responses.

LiteSpeed Cache web-application wordpress information-disclosure cve-2026-93389
1c