LWS

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

LWS records in CISA KEV

No LWS vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Lws Tools 2 records MEDIUM Affiliation 1 record LOW Lws Cleaner 1 record LOW Lws Hide Login 1 record MEDIUM

Records

1 record in Affiliation · all components

TI-2024-29551 CVE-2024-43962 · GHSA-wgjh-wh6q-hmff

WordPress LWS Affiliation plugin <= 2.3.4 - Broken Access Control vulnerability

LOW 38

Missing Authorization vulnerability in LWS LWS Affiliation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LWS Affiliation: from n/a through 2.3.4.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00459 Published 2024-11-01 No fix listed CWE-862

Open these records in search →

Critical	1
High	5
Medium	1
Low	1
No CVSS	0