CVE WATCH / VULNERABILITY DETAIL
CVE-2026-113500
HIGHCVSS 7.5NVD feed
Published 23 October 2026 · tracked since 24 October 2026
Description
The LiteSpeed Cache WordPress plugin before 7.9.2 does not limit one of its HTML optimization routines to stylesheet content, so it can delete the markup that closes an attribute in the rendered page, and combined with unescaped comment author output this allows unauthenticated users whose comments
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-63120 HIGH 8.4
- CVE-2026-57142 HIGH 7.8
- CVE-2026-57144 HIGH 8.8
- CVE-2026-57117 HIGH 8.8
- CVE-2026-112854 CRITICAL 9.8
- CVE-2026-112855 CRITICAL 9.8
- CVE-2026-112856 CRITICAL 9.8
- CVE-2026-112857 CRITICAL 9.8
- CVE-2026-112858 CRITICAL 9.8
- CVE-2026-112859 CRITICAL 9.8