Vulnerabilities in LWS
8 resultsVexday analysis
LWS apresenta footprint moderado com 8 CVEs catalogadas, nenhuma sob exploração ativa no momento. A ameaça está concentrada em 1 vulnerabilidade crítica relacionada a falsificação de solicitação entre sites (CWE-352), mas o risco é estabilizado pela ausência de publicações recentes e inexistência de ataques documentados.
CVE-2023-32297CRITICALWordPress LWS Affiliation plugin <= 2.2.6 - Local File Inclusion vulnerabilityEPSS 0.8%CVE-2024-43962MEDIUMWordPress LWS Affiliation plugin <= 2.3.4 - Broken Access Control vulnerabilityEPSS 0.5%CVE-2023-47818LOWWordPress LWS Hide Login plugin <= 2.1.8 - Secret Login Page Location Disclosure on Multisites vulnerabilityEPSS 0.3%CVE-2023-27453MEDIUMWordPress LWS Tools Plugin <= 2.3.1 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%CVE-2023-34025MEDIUMWordPress LWS Hide Login Plugin <= 2.1.6 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%CVE-2023-35781MEDIUMWordPress LWS Cleaner Plugin <= 2.3.0 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.2%CVE-2023-35774MEDIUMWordPress LWS Tools Plugin <= 2.4.1 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.2%CVE-2024-30541MEDIUMWordPress LWS Optimize plugin <= 1.9.1 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%