
LiteSpeed Cache (free version), arguably the world’s most popular WordPress plugin for site optimization, was vulnerable in a way that allowed hackers to obtain admin-level privileges and essentially take over the websites that had it installed.
This is according to the WordPress vulnerability mitigation project, Patchstack, whose member, John Blackbourn, discovered and reported the flaw.