Vendors / LWS Records 8 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 5
Exploited now LWS records in CISA KEV No LWS vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 74
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in LWS LWS Affiliation allows PHP Local File Inclusion.This issue affects LWS Affiliation: from n/a through 2.2.6.
CVSS 3.1 CRITICAL 9.0· Network · No auth · No interaction · EPSS 0.00758 · Published 2024-05-17 · No fix listed CWE-22
Priority MEDIUM 44
Cross-Site Request Forgery (CSRF) vulnerability in LWS LWS Tools plugin <= 2.3.1 versions.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00303 · Published 2023-11-22 · No fix listed CWE-352
Priority MEDIUM 40
Cross-Site Request Forgery (CSRF) vulnerability in LWS LWS Hide Login plugin <= 2.1.6 versions.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00301 · Published 2023-11-09 · No fix listed CWE-352
Priority LOW 38
Missing Authorization vulnerability in LWS LWS Affiliation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LWS Affiliation: from n/a through 2.3.4.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00459 · Published 2024-11-01 · No fix listed CWE-862
Priority LOW 38
Cross-Site Request Forgery (CSRF) vulnerability in LWS Cleaner plugin <= 2.3.0 versions.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00248 · Published 2023-07-11 · No fix listed CWE-352
Priority LOW 38
Cross-Site Request Forgery (CSRF) vulnerability in LWS LWS Tools plugin <= 2.4.1 versions.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00248 · Published 2023-07-11 · No fix listed CWE-352
Priority LOW 19
Cross-Site Request Forgery (CSRF) vulnerability in LWS LWS Optimize.This issue affects LWS Optimize: from n/a through 1.9.1.
CVSS 3.1 MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.002 · Published 2024-03-31 · No fix listed CWE-352
Priority LOW 17
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in LWS LWS Hide Login allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects LWS Hide Login: from n/a through 2.1.8.
CVSS 3.1 LOW 3.7· Network · No auth · No interaction · EPSS 0.00303 · Published 2024-06-04 · No fix listed CWE-200
Open these records in search → All records by CVSS severity
1 5 1 1 0
THREATIST.IORead the docs