CVE-2025-8575

creationtimestamp| type| source ---|---|--- 2025-09-12 07:50:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lymropei5x2m 2025-09-12 08:05:55+00:00| seen| https://gist.github.com/Darkcrai86/e5daee8e4cdb760338d43fdae91c6961...

WordPress LWS Cleaner plugin <= 2.4.1.3 - Authenticated (Administrator+) Arbitrary File Deletion via 'lws_cl_delete_file' vulnerability

Authenticated Administrator+ Arbitrary File Deletion via 'lwscldeletefile' vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin LWS Cleaner versions = 2.4.1.3...