my tests show these rules works for native virtual host(created in lsws admin console);
but not apply for virtual host from parsing apache's httpd.conf.
for those virtual hosts from apache's httpd.conf, litespeed support mod_security rules(which is much more complicated).
so either creating a native virtual host to run your wordpress; or convert these rules in mod_security's format, to have these rules work.