Surge of JavaScript Malware in sites with vulnerable versions of LiteSpeed Cache Plugin

WordPress Security Alert

WordPress Security Alert: Malware Infection

If you’ve noticed the admin user named “wpsupp‑user” on your WordPress site, your site may be infected with malware. This issue primarily affects sites using vulnerable versions of the LiteSpeed Cache plugin (version < 5.7.0.1).

What to Look For:
Malware can hide in important WordPress files or databases, potentially altering them. Signs of infection include suspicious users, unusual admin accounts, and strange code.

Risks:
Attackers can gain unauthorized access, compromising your site’s security and data.

Cleanup Steps:

1. Update all plugins and delete any suspicious ones.
2. Check for malicious users.
3. Search your database for certain suspicious code strings.
4. Monitor for harmful URLs and IP addresses linked to the malware.

Stay vigilant to protect your website!

What This Means

This issue may affect your WordPress website if you are using the mentioned plugin or theme. Immediate action is recommended to avoid security risks.

Recommended Fix

• Install the latest version of the affected plugin
• Deactivate and remove unused plugins
• Scan your website for malware
• Ensure WordPress is up to date

Security Risk

This vulnerability could allow attackers to exploit your site.

Source: View Original Report