CVE-2025-12450Active Exploitation

LOWCVSS 6.1 · MEDIUM

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

Prioritize remediation for affected systems immediately
Assume compromise if assets are exposed
Track advisory updates for patch or workaround availability

Recommended action window: Immediate (within 24h)

NVD description

The LiteSpeed Cache plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URLs in all versions up to, and including, 7.5.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.

Back to dashboard

3.5/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-79

Priority

LOW

Exploitation

ACTIVE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

Active exploitation appears in 1 classified signals
1 mentions across 1 observed day

What's happening

Active exploitation reported across 1 signal
Technical details provided in 1 signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Active Exploitation

1100.0%

Referenced assets1 URL

By indicator

http://ctiwatch.cloud/alerts

Full discourse1 post

CTIWatch@ctiwatchcloud177d
Active Exploitation
🚨 [HIGH] Active exploitation detected: CVE-2025-12450 Exploit in the wild confirmed for CVE-2025-12450 (CVSS null). The LiteSpeed Cache plugin for WordPress is vulnerable to Reflected Cross-Site Scripting... 🔗 http://ctiwatch.cloud/alerts #ZeroDay #ExploitInWild #CyberSecurity
Post summary
CVE‑2025‑12450 is being actively exploited in the wild, targeting the LiteSpeed Cache WordPress plugin with reflected XSS. No patch or PoC is mentioned in the alert.
00000188
5.6K followersView on X

Explore more

Back to dashboard