Shawfactor

8 CVEs across 8 Shawfactor products. Browse Shawfactor vulnerabilities, severities, and proof-of-concept exploits.

Shawfactor products with known CVEs

ProductCVEs
Lh Add Media From Url1
Lh Copy Media File1
Lh Email1
Lh Login Page1
Lh Ogp Meta1
Lh-Password-Changer1
Lh Qr Codes1
Lh Signing1
Shawfactor CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-9633Medium4.32025-09-11The LH Signing plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.83. This is due to missing or incorrect…
CVE-2025-30587High7.12025-03-24Cross-Site Request Forgery (CSRF) vulnerability in shawfactor LH OGP Meta lh-ogp-meta-tags allows Stored XSS.This issue affects LH OGP Meta: from n/a through <…
CVE-2025-23676High7.12025-01-22Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in shawfactor LH Email lh-email allows Reflected XSS.This is…
CVE-2025-23547High7.12025-01-16Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in shawfactor LH Login Page lh-login-page allows Reflected X…
CVE-2024-51572Medium6.52024-11-11Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in shawfactor LH QR Codes lh-qr-codes allows Stored XSS.This…
CVE-2024-9220Medium6.12024-10-01The LH Copy Media File plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the…
CVE-2024-7090Medium6.12024-08-21The LH Add Media From Url plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘lh_add_media_from_url-file_url’ parameter in all versio…
CVE-2023-34182Medium5.42023-11-09Cross-Site Request Forgery (CSRF) vulnerability in Peter Shaw LH Password Changer plugin <= 1.55 versions.