A critical vulnerability in LiteSpeed Cache, a WordPress plugin installed on over 5 million websites has been discovered and is already under active exploitation by hackers. The flaw, tracked as CVE-2024-28000, affects all versions up to 6.3.0.1, and allows unauthenticated attackers to escalate their local privileges by brute-forcing a weak hash value, enabling them to create rogue administrator accounts and potentially take over affected sites. The vulnerability was identified on August 19th, 2024, by the Wordfence Threat Intelligence team, who quickly deployed a firewall rule to protect Premium users, while free users will receive the protection on September 19th, 2024. Despite the availability of a patched version (6.4.1), only about 30% of sites have updated, leaving millions still vulnerable. The exploitation of this flaw can lead to severe consequences, including the installation of malicious plugins, alteration of critical settings, and theft of user data. Wordfence has already detected and blocked over 48,500 attacks targeting this vulnerability within twenty-four (24) hours of its details becoming public. This incident marks the second major security issue for LiteSpeed Cache in 2024, highlighting the urgent need for users to update their sites or remove the plugin to prevent potential takeovers. CTIX analysts strongly urge any site administrators affected by this vulnerability to upgrade to the latest patch or remove the plugin temporarily until the free versions are updated.