UpHeron
All vulnerabilities

WordPress plugins

CVE-2026-93389

LiteSpeed Cache <= 7.9.1 - Unauthenticated Sensitive Information Disclosure (WooCommerce Store API Cart/Checkout PII + Cart-Token) via Public REST Caching

Severity
High 8.2
Published
5 Nov 2026
Last changed
5 Nov 2026
Added to UpHeron
5 Nov 2026
Sources
CVE Program

Affected software

SoftwareAffected versions
LiteSpeed CacheWordPress plugins · wp-plugin:litespeed-cache
  • Every version up to 7.9.1

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-93389