The National Information Technology Development Agency (NITDA) has issued a critical security alert to WordPress users in Nigeria concerning a major vulnerability, CVE-2024-28000. This flaw affects more than 5 million websites worldwide, specifically targeting sites using the LiteSpeed Cache plugin, a popular tool for improving website performance.
The vulnerability, found in the plugin’s “role simulation” feature, allows hackers to gain unauthorized administrative access to WordPress sites. Once inside, cybercriminals can install malicious plugins, steal sensitive data, or redirect users to harmful websites. The breach can occur without requiring a password, making it particularly dangerous.
According to NITDA, the exploit is relatively easy for attackers to carry out. Weak hash functions and exposed debug logs make it simple for hackers to brute-force their way into a site or obtain admin rights. If a website falls victim to this attack, it could result in data theft, site defacement, and compromised user safety, as visitors may be redirected to malicious websites.
In response to this threat, NITDA advises WordPress site owners to immediately update their LiteSpeed Cache plugin to version 6.4.1, which includes a patch for the vulnerability. Users can perform this update through their WordPress dashboard under the “Plugins” section. Additionally, NITDA recommends disabling debugging on live sites to prevent sensitive information from being exposed and regularly reviewing plugin settings for potential security risks.
While LiteSpeed Cache has been a reliable tool for optimizing site speed, it has previously been associated with various vulnerabilities, including cross-site scripting and privilege escalation. To protect against future threats, NITDA emphasizes the importance of keeping all plugins updated and staying informed about security warnings.
Website administrators are urged to take immediate action to safeguard their websites and user data from potential cyberattacks by updating the LiteSpeed Cache plugin and remaining vigilant.
