Exploitation of the flaw, which was addressed last week, through a brute-force attack iterating and passing all known possible security hash values in the litespeed_hash cookie could facilitate immediate site access through any user ID provided that threat actors know an admin-level user's ID.
Article Link: Widespread WordPress site compromise likely with critical LiteSpeed Cache bug | SC Media