Really Simple Security logo

Log out
Get PRO

LWS Affiliation

  • LWS Affiliation on WordPress.org
  • Current version: 2.3.5
  • Last update: September 20, 2024
  • Known issues: Open

This information is sourced from wpvulnerabilities.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Submit

Vulnerabilities

  • Input validation vulnerability in LWS Affiliation 2.3.6

    Open

    The LWS Affiliation plugin for WordPress has a security issue in versions 2.3.6 and below. This means that someone who is not authorized can make a request that looks legitimate, tricking a site admi...

    Read More

  • Access violation vulnerability in LWS Affiliation 2.3.3

    Fixed

    The LWS Affiliation plugin for WordPress has a security issue that allows unauthorized access. This means that someone who is not supposed to have access can still perform actions on the plugin. This...

    Read More

  • Input validation vulnerability in LWS Affiliation 2.2.6

    Fixed

    The LWS Affiliation plugin for WordPress is vulnerable to security threats in versions up to 2.2.6. Unauthenticated attackers can include and execute code from a remote server if the 'allow_url_inclu...

    Read More

  • Access violation vulnerability in 6 plugins by LWS

    Fixed

    Several plugins for WordPress created by LWS (LWS Affiliation, LWS Optimize, LWS Tools, LWS Cleaner, LWS SMS and LWS Hide Login) have a security flaw which could allow attackers with at least subscri...

    Read More