Sergiu Gatlan / BleepingComputer:
LiteSpeed Cache, the top WordPress site acceleration plugin, had a critical flaw that left sites open to takeover attacks; 2M+ sites are likely still vulnerable — A critical vulnerability in the LiteSpeed Cache WordPress plugin can let attackers take over millions of websites after creating rogue admin accounts.