Lws

8 CVEs across 9 Lws products. Browse Lws vulnerabilities, severities, and proof-of-concept exploits.

Lws products with known CVEs

ProductCVEs
Lws Affiliation2
Lws Hide Login2
Lws Tools2
Lws Tools2
Affiliation1
Lws Cleaner1
Lws Cleaner1
Lws Hide Login1
Lws Optimize1
Lws CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-43962Medium5.42024-11-01Missing Authorization vulnerability in LWS LWS Affiliation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LWS Affil…
CVE-2023-47818Low3.72024-06-04Exposure of Sensitive Information to an Unauthorized Actor vulnerability in LWS LWS Hide Login allows Accessing Functionality Not Properly Constrained by ACLs…
CVE-2023-32297Critical9.02024-05-17Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in LWS LWS Affiliation allows PHP Local File Inclusion.This issue…
CVE-2024-30541Medium4.32024-03-31Cross-Site Request Forgery (CSRF) vulnerability in LWS LWS Optimize.This issue affects LWS Optimize: from n/a through 1.9.1.
CVE-2023-27453Medium5.42023-11-22Cross-Site Request Forgery (CSRF) vulnerability in LWS LWS Tools plugin <= 2.3.1 versions.
CVE-2023-34025Medium5.42023-11-09Cross-Site Request Forgery (CSRF) vulnerability in LWS LWS Hide Login plugin <= 2.1.6 versions.
CVE-2023-35774Medium5.42023-07-11Cross-Site Request Forgery (CSRF) vulnerability in LWS LWS Tools plugin <= 2.4.1 versions.
CVE-2023-35781Medium5.42023-07-11Cross-Site Request Forgery (CSRF) vulnerability in LWS Cleaner plugin <= 2.3.0 versions.