CVE-2025-2982

The CVE-2025-2982 entry concerns Legrand SMS PowerView 1.x. Affects an unknown function where manipulation of the redirect argument results in file inclusion. The issue is exploitable remotely. Public disclosure is noted. CVSS metrics show a network, low-attack-complexity, low-privilege-requireme...

CVE-2025-2982 Legrand SMS PowerView file inclusion

A vulnerability, which was classified as critical, was found in Legrand SMS PowerView 1.x. Affected is an unknown function. The manipulation of the argument redirect leads to file inclusion. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used...

CVE-2025-2982 Legrand SMS PowerView file inclusion

A vulnerability, which was classified as critical, was found in Legrand SMS PowerView 1.x. Affected is an unknown function. The manipulation of the argument redirect leads to file inclusion. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used...

CVE-2025-2981

A vulnerability, which was classified as problematic, has been found in Legrand SMS PowerView 1.x. This issue affects some unknown processing. The manipulation of the argument redirect leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the publi...

CVE-2025-2980

A vulnerability classified as problematic was found in Legrand SMS PowerView 1.x. This vulnerability affects unknown code. The manipulation of the argument redirect leads to open redirect. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vend...

CVE-2025-2981 Legrand SMS PowerView cross site scripting

A vulnerability, which was classified as problematic, has been found in Legrand SMS PowerView 1.x. This issue affects some unknown processing. The manipulation of the argument redirect leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the publi...

CVE-2025-2981

The CVE-2025-2981 entry concerns Legrand SMS PowerView 1.x, where a cross-site scripting vulnerability arises from manipulation of the redirect argument. The issue can be triggered remotely over the network and is tied to insufficient handling of the redirect parameter, allowing injected script t...

CVE-2025-2981 Legrand SMS PowerView cross site scripting

A vulnerability, which was classified as problematic, has been found in Legrand SMS PowerView 1.x. This issue affects some unknown processing. The manipulation of the argument redirect leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the publi...

CVE-2025-2980 Legrand SMS PowerView redirect

A vulnerability classified as problematic was found in Legrand SMS PowerView 1.x. This vulnerability affects unknown code. The manipulation of the argument redirect leads to open redirect. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vend...

CVE-2025-2980

The CVE-2025-2980 entry describes a remote open redirect vulnerability in Legrand SMS PowerView 1.x. The issue arises from improper handling of the argument redirect, enabling an attacker to redirect users to a malicious location. Public exploit availability is indicated, and vendors were reporte...

CVE-2025-2980 Legrand SMS PowerView redirect

A vulnerability classified as problematic was found in Legrand SMS PowerView 1.x. This vulnerability affects unknown code. The manipulation of the argument redirect leads to open redirect. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vend...

PT-2025-13671 · Legrand · Legrand Sms Powerview

Name of the Vulnerable Software and Affected Versions: Legrand SMS PowerView versions 1.x Description: A critical issue has been discovered, affecting an unknown functionality. The manipulation of the redirect argument leads to os command injection. The exploit has been publicly disclosed. There ...

CVE-2025-31457

Cross-Site Request Forgery CSRF vulnerability in Aurélien LWS LWS SMS lws-sms allows Cross Site Request Forgery.This issue affects LWS SMS: from n/a through = 2.4.1...

CVE-2025-31457

Cross-Site Request Forgery CSRF vulnerability in Aurélien LWS LWS SMS lws-sms allows Cross Site Request Forgery.This issue affects LWS SMS: from n/a through = 2.4.1...

CVE-2025-31457 WordPress LWS SMS <= 2.4.1 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Aurélien LWS LWS SMS allows Cross Site Request Forgery. This issue affects LWS SMS: from n/a through 2.4.1...

CVE-2025-31457

CVE-2025-31457 is a CSRF vulnerability in the WordPress plugin LWS SMS (lws-sms) affecting versions up to and including 2.4.1. The issue is listed as Cross-Site Request Forgery with a CVSS v3.1 base score of 5.4 (Medium). The connected Wordfence entry confirms the affected software and CVE refere...

CVE-2025-31457 WordPress LWS SMS plugin <= 2.4.1 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Aurélien LWS LWS SMS lws-sms allows Cross Site Request Forgery.This issue affects LWS SMS: from n/a through = 2.4.1...

WordPress plugin LWS SMS 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

SMS Scam Uses Elon Musk’s Name to Sell Fake Energy Devices to US Users

Fake Elon Musk endorsements are used in SMS campaigns to sell bogus energy-saving devices. Learn how to spot…...

CVE-2025-1475

The WPCOM Member plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.7.5. This is due to insufficient verification on the 'userphone' parameter when logging in. This makes it possible for unauthenticated attackers to log in as any existing user on t...