The vulnerability is an insertion of sensitive information into sent data, allowing retrieval of embedded sensitive data. This flaw can expose confidential information that should remain private and is classified as CWE‑201.

The affected product is the LiteSpeed Cache plugin for WordPress used by administrators and web developers, impacting all installations of the plugin up to and including version 7.9. Identifying whether the site is running a vulnerable version requires checking the installed plugin version.

The CVSS base score is 5.9, indicating medium severity. EPSS is not available and the issue is not listed in the CISA KEV catalog. Attackers likely exploit the plugin through web requests to the WordPress site; the vulnerability resides in the caching logic that can be triggered with typical access to the plugin interface. Exposure of sensitive data would occur if the plugin stores confidential material in the cache and an attacker can retrieve it. The risk depends on the nature of the cached data and the site’s exposure level.