shawfactor

Products

ProductCVEsExploitedLatest
LH Add Media From Url1–Aug 21, 2024
LH Copy Media File1–Oct 1, 2024
LH Email1–Jan 22, 2025
LH Login Page1–Jan 16, 2025
LH OGP Meta1–Mar 24, 2025
LH QR Codes1–Nov 11, 2024
LH Signing1–Sep 11, 2025

Exploited and recent CVEs

  • CVE-2025-9633 Medium 4.3 LH Signing <= 2.83 - Cross-Site Request Forgery 0.2%
  • CVE-2025-30587 High 7.1 WordPress LH OGP Meta plugin <= 1.73 - CSRF to Stored XSS Vulnerability 0.2%
  • CVE-2025-23676 High 7.1 WordPress LH Email plugin <= 1.12 - Reflected Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2025-23547 High 7.1 WordPress LH Login Page plugin <= 2.14 - Reflected Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2024-51572 Medium 6.5 WordPress LH QR Codes plugin <= 1.06 - Stored Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-9220 Medium 6.1 LH Copy Media File <= 1.08 - Reflected Cross-Site Scripting 0.4%
  • CVE-2024-7090 Medium 6.1 LH Add Media From Url <= 1.23 - Reflected Cross-Site Scripting 0.4%