Skip to content
PluginCanary

LiteSpeed Cache

by LiteSpeed Technologies · 7,000,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 3 Nov 2026, 66 releases in 24 months, no unpatched vulnerabilities.

80/ 100 Canary Score
Sub-scores for LiteSpeed Cache
Ownership100
Maintenance100
Security60
Support47
Reputation85

How the score works

Quick answers

Is LiteSpeed Cache still maintained?
Yes. Last release 3 Nov 2026, 66 releases in the last 24 months. 3 Nov 2026 · wordpress.org
Who owns LiteSpeed Cache, and has it changed hands?
No change recorded. Main committer LiteSpeedTech since Jan 2016. 4 Nov 2026 · SVN log
Was LiteSpeed Cache removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is LiteSpeed Cache safe?
29 known vulnerabilities, all fixed (latest in 7.9.2). Not on the exploited list. 28 Oct 2026 · Wordfence Intelligence
Is the latest LiteSpeed Cache update safe to install?
No ownership change before 7.9.3. No one-star spike after it. 3 Nov 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
LiteSpeedTech29 Jan 2016 to 3 Nov 2026, 330 commits
hailite14 Mar 2019 to 20 May 2020, 32 commits

2 committers recorded. No ownership change since 2016.

Maintenance

Last release
yesterday
Releases, 24 months
66
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for LiteSpeed Cache
Q1 20240
Q2 20240
Q3 20240
Q4 20241
Q1 20251
Q2 202548
Q3 20255
Q4 20254
Q1 20262
Q2 20261
Q3 20262
Q4 20262

Last release 3 Nov 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: 4.5 (15 reviews). Lifetime: 4.8.

Average rating per quarter for LiteSpeed Cache
Q2 20264.7
Q3 20264.4
Q4 20265.0

Average rating rose from 4.7 to 5.0 between Q2 2026 and Q4 2026.

Rating distribution
5 star2560
4 star65
3 star28
2 star21
1 star104
Latest low reviews

Security record

14 vulnerabilities in 24 months (29 on record), all patched (latest fixed in 7.9.2).

Show 29 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
28 Oct 2026LiteSpeed Cache <= 7.9.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via VPI Image Attribute Re-Serialization6.4<= 7.9.17.9.2Patched before disclosure
28 Oct 2026LiteSpeed Cache <= 7.9.1 - Unauthenticated Stored Cross-Site Scripting via HTML Minifier Predictable Placeholder (md5(REQUEST_TIME) + two-pass str_replace)5.4<= 7.9.17.9.2Patched before disclosure
23 Oct 2026LiteSpeed Cache < 7.9.2 - Unauthenticated Stored Cross-Site Scripting7.2< 7.9.27.9.2Patched before disclosure
23 Oct 2026LiteSpeed Cache < 7.9.2 - Missing Authorization4.3< 7.9.27.9.2Patched before disclosure
23 Oct 2026LiteSpeed Cache < 7.9.2 - Unauthenticated Stored Cross-Site Scripting7.2< 7.9.27.9.2Patched before disclosure
22 Oct 2026LiteSpeed Cache <= 7.9 - Unauthenticated Information Exposure5.3<= 7.97.9.1Patched before disclosure
18 Sep 2026LiteSpeed Cache <= 7.9 - Reflected Cross-Site Scripting via ESI 'esi' Parameter4.7<= 7.97.9.1Patched before disclosure
2 Sep 2026LiteSpeed Cache <= 7.9 - Unauthenticated Server-Side Request Forgery7.2<= 7.97.9.1Patched before disclosure
27 Aug 2026LiteSpeed Cache <= 7.8.1 - Unauthenticated Stored Cross-Site Scripting via Comment Content7.2<= 7.8.17.9Patched before disclosure
27 Aug 2026LiteSpeed Cache <= 7.7 - Authenticated (Author+) Stored Cross-Site Scripting via img Tag Attributes6.4<= 7.77.8Patched before disclosure
26 May 2026LiteSpeed Cache <= 7.7 - Unauthenticated Stored Cross-Site Scripting via QUIC.cloud CCSS/UCSS REST API Endpoints7.2<= 7.77.8Patched before disclosure
28 Oct 2025LiteSpeed Cache <= 7.5.0.1 - Reflected Cross-Site Scripting6.1<= 7.5.0.17.6Patched before disclosure
7 May 2025LiteSpeed Cache <= 7.0.1 - Authenticated (Editor+) Server-Side Request Forgery5.5<= 7.0.17.1Patched before disclosure
20 Dec 2024LiteSpeed Cache <= 6.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 6.5.26.5.3110
29 Oct 2024LiteSpeed Cache <= 6.5.1 - Unauthenticated Privilege Escalation8.1<= 6.5.16.5.2162
30 Sep 2024LiteSpeed Cache <= 6.4.1 - Authenticated (Author+) Path Traversal4.3<= 6.4.16.5.1191
30 Sep 2024LiteSpeed Cache <= 6.1 - Unauthenticated Stored Cross-Site Scripting7.2<= 6.5.0.26.5.1191
30 Sep 2024LiteSpeed Cache <= 6.5.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 6.5.0.26.5.1191
24 Sep 2024litespeed cache <= 6.4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting5.5<= 6.4.16.5196
5 Sep 2024LiteSpeed Cache <= 6.4.1 - Unauthenticated Sensitive Information Exposure via Log Files7.5<= 6.4.16.5.0.1216
21 Aug 2024LiteSpeed Cache <= 6.3.0.1 - Unauthenticated Privilege Escalation9.8<= 6.3.0.16.4231
23 Jul 2024LiteSpeed Cache <= 6.2.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting6.1<= 6.2.0.16.3260
27 Feb 2024LiteSpeed Cache <= 5.7 - Missing Authorization via update_cdn_status5.3<= 5.75.7.0.1Patched before disclosure
27 Feb 2024LiteSpeed Cache <= 5.7 - Unauthenticated Stored Cross-Site Scripting via 'nameservers' and '_msg'7.2<= 5.75.7.0.1Patched before disclosure
23 Oct 2023LiteSpeed Cache <= 5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4<= 5.65.7534

Changelog mentions of security fixes: 7.9 (nonce); 7.9.1 (authorization); 7.9.2 (nonce, escaping).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

47% of 70 support threads resolved in the last 2 months.

Momentum

7,000,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for LiteSpeed Cache
4 May 2026129,599
11 May 2026252,424
18 May 2026243,808
25 May 2026241,996
1 Jun 2026200,586
8 Jun 2026181,697
15 Jun 2026185,048
22 Jun 2026164,339
29 Jun 2026168,886
6 Jul 2026157,613
13 Jul 2026159,963
20 Jul 2026166,035
27 Jul 2026175,556
3 Aug 20261,620,578
10 Aug 2026342,240
17 Aug 2026269,126
24 Aug 2026262,673
31 Aug 20261,528,382
7 Sep 2026330,431
14 Sep 2026263,800
21 Sep 2026209,164
28 Sep 2026168,521
5 Oct 2026173,255
12 Oct 2026131,143
19 Oct 20261,450,328
26 Oct 2026350,203
2 Nov 202637,164

Weekly downloads over the last 4 weeks are 39% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Nginx HelperScore 100 · 200,000+Cache EnablerScore 96 · 100,000+Super Page CacheScore 95 · 70,000+WP Super CacheScore 93 · 1,000,000+SpeedyCacheScore 92 · 500,000+

Facts

Version7.9.3
AuthorLiteSpeed Technologies
Added29 Jan 2016
Last updated3 Nov 2026
Active installs7,000,000+
Requires WordPress6.0
Tested up to7.1.4
Requires PHP7.4
CategoryPerformance & Optimization > Caching Solutions
Tagsseo, caching, Optimize, pagespeed, performance

Other plugins by this author: Dash Notifier

Questions

Is LiteSpeed Cache still maintained?

Yes. Last release 3 Nov 2026, 66 releases in the last 24 months.

Who owns LiteSpeed Cache, and has it changed hands?

No change recorded. Main committer LiteSpeedTech since Jan 2016.

Was LiteSpeed Cache removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is LiteSpeed Cache safe?

29 known vulnerabilities, all fixed (latest in 7.9.2). Not on the exploited list.

Is the latest LiteSpeed Cache update safe to install?

No ownership change before 7.9.3. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue