Unauthenticated Privilege Escalation

The plugin fails to properly restrict the role simulation functionality, allowing attackers to spoof their user ID as an administrator if they obtain or brute force a valid hash, potentially found in debug logs. This vulnerability enables unauthenticated attackers to create new administrator accounts via the `/wp-json/wp/v2/users` REST API endpoint.

This vulnerability affects the following application versions:

• LiteSpeed Cache 4.0
• LiteSpeed Cache 4.1
• LiteSpeed Cache 4.2
• LiteSpeed Cache 4.3
• LiteSpeed Cache 4.4
• LiteSpeed Cache 4.4.1
• LiteSpeed Cache 4.4.2
• LiteSpeed Cache 4.4.3
• LiteSpeed Cache 4.4.4
• LiteSpeed Cache 4.4.5
• LiteSpeed Cache 4.4.6
• LiteSpeed Cache 4.4.7
• LiteSpeed Cache 4.5
• LiteSpeed Cache 4.5.0.1
• LiteSpeed Cache 4.6
• LiteSpeed Cache 5.0
• LiteSpeed Cache 5.0.0.1
• LiteSpeed Cache 5.0.1
• LiteSpeed Cache 5.1
• LiteSpeed Cache 5.2
• LiteSpeed Cache 5.2.1
• LiteSpeed Cache 5.3
• LiteSpeed Cache 5.3.1
• LiteSpeed Cache 5.3.2
• LiteSpeed Cache 5.3.3
• LiteSpeed Cache 5.4
• LiteSpeed Cache 5.5
• LiteSpeed Cache 5.5.1
• LiteSpeed Cache 5.6
• LiteSpeed Cache 5.7
• LiteSpeed Cache 5.7.0.1
• LiteSpeed Cache 6.0
• LiteSpeed Cache 6.0.0.1
• LiteSpeed Cache 6.1
• LiteSpeed Cache 6.2
• LiteSpeed Cache 6.2.0.1
• LiteSpeed Cache 6.3
• LiteSpeed Cache 6.3.0.1