WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
luzuk-team
Published
2024-11-08
Title
Luzuk Team <= 0.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
luzuk-testimonials
Published
2024-11-08
Title
Luzuk Testimonials <= 0.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
lw-all-in-one
Published
2020-10-12
Title
LocalWeb All In One plugin < 1.6.5 - Unauthenticated Stored Cross-Site Scripting (XSS)
Slug
lws-affiliation
Published
2024-08-26
Title
LWS Affiliation < 2.3.5 - Missing Authorization
Slug
lws-affiliation
Published
2025-09-22
Title
LWS Affiliation <= 2.3.6 - Cross-Site Request Forgery
Slug
lws-cleaner
Published
2023-07-11
Title
LWS Cleaner < 2.3.1 - Cross-Site Request Forgery
Slug
lws-cleaner
Published
2025-09-11
Title
LWS Cleaner < 2.4.2 - Admin+ Arbitrary File Deletion
Slug
lws-hide-login
Published
2023-05-23
Title
LWS Hide Login < 2.1.7 - Plugin Settings Page Creation via CSRF
Slug
lws-hide-login
Published
2023-11-16
Title
LWS Hide Login < 2.1.9 - Protection Mechanism Bypass
Slug
lws-optimize
Published
2024-03-29
Title
LWS Optimize < 2.0 - Cross-Site Request Forgery
Slug
lws-sms
Published
2025-03-28
Title
LWS SMS <= 2.4.1 - Cross-Site Request Forgery
Slug
lws-tools
Published
2023-06-16
Title
LWS Tools < 2.4.2 - Cross-Site Request Forgery
Slug
lwscache
Published
2025-08-28
Title
LWSCache < 2.9 - Subscriber+ Limited Plugin Activation