CVE-2026-3129
MediumCVSS 6.4Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via crafted `<img>` tag attributes in all versions up to, and including, 7.7. This is due to a flawed regular expression used to strip `width` and `height` attributes from images when the "Lazy Load Images" and "Add Missing Sizes" features are enabled.
Risk Assessment
An authenticated attacker with Author-level access or above can inject arbitrary web scripts on pages that execute whenever a user accesses an injected page, potentially leading to session theft, account takeover, or other attacks.
Recommendation
Upgrade the LiteSpeed Cache plugin to the latest version that contains the fix for this vulnerability.
Other vulnerabilities in LiteSpeed Cache
Original NVD description (English source)
The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via crafted `<img>` tag attributes in all versions up to, and including, 7.7. This is due to a flawed regular expression that is used to strip `width` and `height` attributes from images when the "Lazy Load Images" and "Add Missing Sizes" features are enabled. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that execute whenever a user accesses an injected page.