WordPress Plugin LWS Optimize 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin LWS Optimize A...

WordPress LWS Optimize plugin <= 1.9.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin LWS Optimize versions = 1.9.1...

WordPress LWS Optimize Plugin <= 1.9.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software LWS Optimize Type Plugin Vulnerable versions = 1.9.1 Fixed in 2.0 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-30541 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 77212549cdac Credits Dhabaleshwar Das Require...

LWS Hide Login < 2.1.9 - Protection Mechanism Bypass

Description The LWS Hide Login plugin for WordPress is vulnerable to protection mechanism bypass in all versions up to, and including, 2.1.8. This is due to the fact that attackers can bypass the hidden login page by visiting install.php. This makes it possible for unauthenticated attackers to...

CVE-2023-27453

Cross-Site Request Forgery CSRF vulnerability in LWS LWS Tools plugin = 2.3.1 versions...

CVE-2023-27453

Cross-Site Request Forgery CSRF vulnerability in LWS LWS Tools plugin = 2.3.1 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in LWS LWS Tools plugin = 2.3.1 versions...

CVE-2023-27453 WordPress LWS Tools Plugin <= 2.3.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in LWS LWS Tools plugin = 2.3.1 versions...

CVE-2023-27453 WordPress LWS Tools Plugin <= 2.3.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in LWS LWS Tools plugin = 2.3.1 versions...

CVE-2023-27453

CVE-2023-27453 is a CSRF in the WordPress plugin LWS Tools (

WordPress Plugin LWS Tools Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

WordPress LWS Hide Login Plugin <= 2.1.8 is vulnerable to Bypass Vulnerability

Software LWS Hide Login Type Plugin Vulnerable versions = 2.1.8 Fixed in 2.1.9 OWASP Top 10 A4: Insecure Design Classification Bypass Vulnerability CVE CVE-2023-47818 Patch priority Low CVSS severity Low 3.7 Developer Claim ownership PSID 6d52db64950c Credits Naveen Muthusamy Required privilege...

CVE-2023-34025

Cross-Site Request Forgery CSRF vulnerability in LWS LWS Hide Login plugin = 2.1.6 versions...

CVE-2023-34025

A vulnerability in Aurélien LWS LWS Hide Login lws-hide-login.This issue affects LWS Hide Login: from n/a through = 2.1.6...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in LWS LWS Hide Login plugin = 2.1.6 versions...

CVE-2023-34025 WordPress LWS Hide Login Plugin <= 2.1.6 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in LWS LWS Hide Login plugin = 2.1.6 versions...

CVE-2023-34025 WordPress LWS Hide Login plugin <= 2.1.6 - Cross Site Request Forgery (CSRF) vulnerability

A vulnerability in Aurélien LWS LWS Hide Login lws-hide-login.This issue affects LWS Hide Login: from n/a through = 2.1.6...

CVE-2023-34025

CVE-2023-34025 affects the WordPress plugin LWS Hide Login (versions ≤ 2.1.6). It is a CSRF vulnerability with CVSSv3.1 base score 8.8 (HIGH) and an attack vector of network, requiring user interaction. Remediation: upgrade to version 2.1.7 or later (patch released) to fix the issue. Exploitation...

PT-2023-24640 · WordPress · Wps Hide Login

Name of the Vulnerable Software and Affected Versions: LWS Hide Login plugin versions = 2.1.6 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application...

PT-2023-23708 · Unknown · Lws Affiliation

Name of the Vulnerable Software and Affected Versions: LWS Affiliation versions prior to 2.2.7 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal', which allows PHP Local File Inclusion in LWS Affiliation...