Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

1 detection

Detects exploitation attempts against the WordPress LiteSpeed Cache plugin (CVE-2024-28000), including suspicious web requests involving ESI/crawler cookie hash manipulation, execution of known exploit binaries (wp28000, wp28000_cp), and subsequent unauthorized creation of administrator accounts via the WordPress REST API.
avatar
Tim Peck@timpeck
avatar
Detections.ai Community
2 months ago
8328