Known vulnerabilities in LiteSpeed User-End cPanel Plugin

Vendor: LiteSpeed Technologies
Software: LiteSpeed User-End cPanel Plugin
Software CPE: cpe:2.3:a:litespeedtech:litespeed_user-end_cpanel_plugin:*:*:*:*:*:*:*:*
Website: https://open.litespeedtech.com
Total vulnerabilities: 2
Public exploits: 1
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting LiteSpeed User-End cPanel Plugin LiteSpeed User-End cPanel Plugin is affected by 2 known vulnerabilities: 2 critical Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU134649 - Improper Access Control
CVE-2026-54420		 CWE-284 Critical
Available
Exploited
 2.4.8 16.06.2026 SB2026061665
#VU132249 - Incorrect Privilege Assignment
CVE-2026-48172		 CWE-266 Critical
No
Exploited
 2.4.7 25.05.2026 SB2026052520