guest.vary.php

[dimita]

Hi,

I'm using the LiteSpeed Cache plugin on my WordPress site, and the Guest option is disabled. However, when monitoring incoming traffic via cPanel’s Visitors panel, I consistently see suspicious requests being made to this URL:

/wp-content/plugins/litespeed-cache/guest.vary.php > /

This appears to be bot-related traffic or an abuse pattern.

Also, I’ve tested disabling the LiteSpeed Cache plugin entirely — and when it is disabled, these requests stop completely. So it seems directly related to the plugin's presence, even if Guest is off.

 

[serpent_driver]

The guest.vary.php file is not removed if the Guestmode is disabled and belongs to the LiteSpeed cache plugin. If you don't want this file from being accessed by anyone just add this single line of code to the root .htaccess outside of cache plugin markers.

RewriteRule \guest\.vary\.php - [F,L]

 

[abk]

Please use the WordPress forum for our WordPress plugin questions/issues: https://www.litespeedtech.com/suppo...-a-question-about-the-wordpress-plugin.17040/