Log in Start free

LWS

Products

ProductCVEsExploitedLatest
LWS Affiliation2–Nov 1, 2024
LWS Hide Login2–Jun 4, 2024
LWS Tools2–Nov 22, 2023
LWS Cleaner1–Jul 11, 2023
LWS Optimize1–Mar 31, 2024

Exploited and recent CVEs

  • CVE-2024-43962 Medium 5.4 WordPress LWS Affiliation plugin <= 2.3.4 - Broken Access Control vulnerability 0.5%
  • CVE-2023-47818 Low 3.7 WordPress LWS Hide Login plugin <= 2.1.8 - Secret Login Page Location Disclosure on Multisites vulnerability 0.3%
  • CVE-2023-32297 Critical 9.0 WordPress LWS Affiliation plugin <= 2.2.6 - Local File Inclusion vulnerability 0.8%
  • CVE-2024-30541 Medium 4.3 WordPress LWS Optimize plugin <= 1.9.1 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2023-27453 Medium 5.4 WordPress LWS Tools Plugin <= 2.3.1 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%
  • CVE-2023-34025 Medium 5.4 WordPress LWS Hide Login Plugin <= 2.1.6 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%
  • CVE-2023-35774 Medium 5.4 WordPress LWS Tools Plugin <= 2.4.1 is vulnerable to Cross Site Request Forgery (CSRF) 0.2%
  • CVE-2023-35781 Medium 5.4 WordPress LWS Cleaner Plugin <= 2.3.0 is vulnerable to Cross Site Request Forgery (CSRF) 0.2%