LiteSpeed Plesk Extension Changelog¶
Note
We do our best to update this changelog in a timely manner. However, if a version is missing, you can always find the release announcement in our LiteSpeed Edge Google Group.
Version 2.6.0¶
Released: September 16, 2026
- [Feature] Added an Access Control toggle to the main screen, allowing the built-in Plesk administrator to grant Additional Administrator Accounts access to the plugin.
- [Improvement] Removed the limit on Redis cache size.
- [Improvement] Required CSRF tokens for all remaining state-changing actions.
- [Improvement] Hardened root-side file operations against local privilege escalation.
- [Improvement] Hardened scripts and escalated commands against potential command injection and made input validation consistent across system locales.
- [Improvement] Hardened plugin pages against potential XSS by escaping displayed messages, titles, and form errors by default.
- [Improvement] Hardened the parsing of escalated command output.
- [Improvement] Corrected which administrator accounts were subject to the access restriction introduced in version 2.5.0.
- [Improvement] Displayed a friendly message page instead of an
Exception Caughterror when an account that could not use the plugin opened it. - [Improvement] Made the panel and Redis scripts read the server line from
redis_svc.shconsistently. - [Improvement] Sanitized values written to the plugin log file.
- [Improvement] Improved handling of the WebAdmin password during installation. Installation now stops with a clear message instead of leaving the WebAdmin console without a usable login.
- [Improvement] Improved compatibility with Shared Code Library updates during a WordPress cache scan.
- [Improvement] Reduced page-load size across the plugin interface.
- [Bug fix] Prevented Redis-validation slowdowns when Redis was unused.
- [Bug fix] Fixed blank cells in LiteSpeed Containers statistics when a Prometheus time range was selected.
- [Bug fix] Fixed failures when setting, changing, or clearing the Redis configuration file and added a clear reason when a path was rejected.
- [Bug fix] Fixed the Redis service file being upgraded incorrectly in some cases.
- [Bug fix] Fixed the Redis size list sometimes displaying no values after Redis was enabled for a user.
- [Bug fix] Fixed the plugin version on the main screen incorrectly reporting 2.4.4 on a version 2.5.0 installation.
- [Bug fix] Fixed browsers continuing to use cached plugin JavaScript and CSS after an upgrade.
- [Bug fix] Fixed search-box and table styling not being applied to plugin data tables.
- [Bug fix] Fixed the LiteSpeed Web Server installer’s PHP setup step not running and looking for a Plesk PHP version that Plesk no longer offered.
Version 2.5.0¶
Released: May 28, 2026
- [Feature] As a security feature, allowed only the built-in Plesk administrator to use the plugin. Delegated administrators were denied access.
- [Feature] Made web-server switching between Apache and LiteSpeed asynchronous so the page no longer hangs while the web server restarts.
- [Feature] Made switching to Apache detect whether Apache was installed and display installation instructions instead of a misleading prompt.
- [Feature] Added additional Shared Code Library integrity checks.
- [Improvement] Required CSRF tokens for all state-changing actions and accepted them only from the POST body, keeping tokens out of URLs, browser history, and access logs.
- [Improvement] Hardened the plugin against root-side privilege escalation.
- [Improvement] Relocated temporary log files to
/var/lib/litespeed-pleskand improved read/write logic. - [Improvement] Shifted some URLs to HTTPS.
- [Improvement] Improved LSWS home-path validation.
- [Improvement] Changed Prometheus statistics endpoint requests to use PHP cURL.
- [Improvement] Tightened input validation across LiteSpeed Containers.
- [Bug fix] Hardened multiple pages against potential XSS vulnerabilities.
- [Bug fix] Hardened scripts against potential command injection.
- [Bug fix] Properly detected non-CloudLinux systems in Redis.
- [Bug fix] Fixed several issues in
validate_redis.sh. - [Bug fix] Fixed active users being unintentionally disabled in Redis.
- [Bug fix] Fixed Dash Notifier mass-action submissions and improved statistics messages in LiteSpeed Containers.
- [Bug fix] Fixed a
500error that sometimes occurred when clicking the Back button on the LSCWP cache-scan progress page.
Version 2.4.2¶
Released: March 25, 2026
- [Bug fix] Used the
cagefs.mpfile to detect CloudLinux in Redis, fixing the detection added in v2.4.1.
Version 2.4.1¶
Released: March 12, 2026
- [Bug fix] Correctly detected CloudLinux v10 in Redis.
Version 2.4.0¶
Released: February 10, 2026
- [Feature] Added a third-party extension EULA-confirmation requirement and a View EULA page.
- [Improvement] Added
privacy_policy_urlto the plugin meta XML file. - [Improvement] Made miscellaneous code improvements and cleanup.
- [Bug fix] Installed a Redis prerequisite for AlmaLinux 10.
Version 2.3.4¶
Released: November 26, 2025
- [Bug fix] Fixed the incorrect Plesk LiteSpeed directory used for installation.
Version 2.3.3¶
Released: November 10, 2025
- [Bug fix] Properly upgraded the
redis_svc.shfile and repaired it if it was broken in a prior release.
Version 2.3.2¶
Released: October 23, 2025
- [Bug fix] Properly installed Redis if it was not already installed for functions in
redis_user_action.sh. - [Bug fix] Handled duplicate
/etc/passwdUID entries inredis_user_action.shwhen creating a user’s Redis files. - [Bug fix] Properly handled deleted or merged Redis users in the hook function.
- [Bug fix] Handled changes to
redis-svc.shwhen processing the Redis configuration file.
Version 2.3.1¶
Released: October 10, 2025
- [Bug fix] Corrected the Plesk directory path in
redis_user_action.sh.
Version 2.3¶
Released: September 4, 2025
- [Feature] Added package support to Redis.
- [Feature] Added support for enabling or disabling unsized users in Redis.
- [Feature] Added the ability to switch between Valkey and Redis.
- [Improvement] Set root-only permissions on the
redis.sizefile. - [Improvement] Created
/usr/local/lsws/debugto enable debugging to/usr/local/lsws/logs/webcachemgr.log. - [Bug fix] Created Redis temporary-directory files and directories as the user.
- [Bug fix] Prevented FTP-only users from appearing in Redis Users.
- [Bug fix] Correctly handled the renaming of a user account in a hook.
- [Bug fix] Properly uninstalled LiteSpeed hooks and LiteSpeed Redis services when the extension was removed.
Version 2.2.0¶
Released: July 17, 2025
- [Feature] Added a Flag All button to the Cache Management page.
- [Bug fix] Reset all mounts after a Plesk component update.
- [Bug fix] Addressed a minor security vulnerability found by a security researcher.
Version 2.1.5¶
Released: June 20, 2025
- [Bug fix] Fixed a bug in package management where an exception occurred for new users.
Version 2.1.4¶
Released: April 15, 2025
- [Improvement] Improved PHP 8.4 compatibility.
Version 2.1.3¶
Released: January 14, 2025
- [Improvement] Added an extension shortcut to the admin navigation menu.
- [Improvement] Made miscellaneous code improvements.
- [Bug fix] Fixed a minor bug in the Redis-hook set logic.
Version 2.1.2¶
Released: December 20, 2024
- [Bug fix] Properly escalated the list of running Redis services so it displayed correctly for CloudLinux.
- [Bug fix] Saved table settings for Redis.
Version 2.1.1¶
Released: December 17, 2024
- [Feature] Added Unmount All to the LiteSpeed Containers User Manager.
- [Bug fix] Fixed a display bug in the LiteSpeed Containers Stats Manager and User Manager that caused columns to display incorrectly.
- [Bug fix] Corrected hooks for LiteSpeed Containers.
- [Bug fix] Prevented messages indicating loss of access to LiteSpeed Containers.
- [Bug fix] Preserved table state between exiting and reentering a table.
Version 2.1.0¶
Released: November 14, 2024
- [Feature] Added Redis cache flushing.
- [Feature] Added a Redis configuration file.
- [Improvement] Opened new external links in a new window or tab.
- [Improvement] Improved nginx Reverse Proxy detection and disable logic.
- [GUI] Made minor visual improvements to some buttons.
- [GUI] Displayed Apache Port Offset information on more pages.
- [GUI] Improved spacing in title hover text.
- [Misc] Improved HTML structure for some pages.
- [Misc] Corrected some external plugin links.
- [Bug fix] Cleaned up Redis sizes and services with hooks when a user was deleted, or sizes when a service was deleted.
- [Bug fix] Fixed various Redis and LiteSpeed Containers bugs.
Version 2.0.0¶
Released: September 17, 2024
- [Feature] Added new LiteSpeed Containers features.
- [Feature] Added the Cache Redis for Users feature.
Version 1.4.19¶
Released: November 15, 2023
- [Improvement] Improved nginx reverse-proxy detection logic.
- [Bug fix] Fixed the Latest Build alert appearing for non-stable server builds when the
follow_stableflag file was set.
Version 1.4.18¶
Released: October 25, 2023
- [Bug fix] Fixed the
Invalid Entrancebug introduced in v1.4.17.
Version 1.4.17¶
Released: September 26, 2023
- [Improvement] Made miscellaneous code improvements.
Version 1.4.16¶
Released: July 18, 2023
- [Improvement] Improved the reliability of virtual-host cache-root detection.
- [Improvement] Made miscellaneous code improvements.
Version 1.4.15¶
Released: June 20, 2023
- [Improvement] Updated the Cache Manager scan logic.
- [Improvement] Added support for custom Shared Code Library update-failure messages.
- [Misc] Added
aarch64as a supported Linux architecture. - [Misc] Fixed several minor typos.
Version 1.4.14¶
Released: April 17, 2023
- [Improvement] Improved WordPress-scan logic.
Version 1.4.13¶
Released: March 14, 2023
- [Bug fix] Addressed compatibility issues introduced in v1.4.12, release 3.
Version 1.4.12¶
Released: February 17, 2023
- [Bug fix] Addressed
Undefined array key 'stop_msg'exceptions.
Version 1.4.11¶
Released: January 25, 2023
- [Improvement] Made miscellaneous improvements to the existing version-comparison logic.
- [Bug fix] Fixed an issue where LiteSpeed Web Server installation sometimes failed with an
undefined keyexception.
Version 1.4.10¶
Released: December 1, 2022
- [Improvement] Made minor improvements to the LSCWP Version Manager page.
- [Bug fix] Addressed issues with sending LSWS AdminPanel emails.
Version 1.4.9¶
Released: October 31, 2022
- [Improvement] Added Rocky Linux as a supported operating system.
Version 1.4.8¶
Released: August 30, 2022
- [Improvement] Improved PHP 8.x compatibility.
- [Improvement] Made miscellaneous code improvements.