Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

8 records

Vendor: LWS Clear all filters
TI-2024-29551 CVE-2024-43962 · GHSA-wgjh-wh6q-hmff

WordPress LWS Affiliation plugin <= 2.3.4 - Broken Access Control vulnerability

Priority LOW 38

Missing Authorization vulnerability in LWS LWS Affiliation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LWS Affiliation: from n/a through 2.3.4.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00459 Published 2024-11-01 No fix listed CWE-862
TI-2023-25926 CVE-2023-47818 · GHSA-frch-m9m2-4xv8

WordPress LWS Hide Login plugin <= 2.1.8 - Secret Login Page Location Disclosure on Multisites vulnerability

Priority LOW 17

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in LWS LWS Hide Login allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects LWS Hide Login: from n/a through 2.1.8.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00303 Published 2024-06-04 No fix listed CWE-200
TI-2023-15593 CVE-2023-32297 · GHSA-x9x3-qj55-mc5x

WordPress LWS Affiliation plugin <= 2.2.6 - Local File Inclusion vulnerability

Priority HIGH 74

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in LWS LWS Affiliation allows PHP Local File Inclusion.This issue affects LWS Affiliation: from n/a through 2.2.6.

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.00758 Published 2024-05-17 No fix listed CWE-22