Really Simple Security logo

Log out
Get PRO

LWS Tools

  • LWS Tools on WordPress.org
  • Current version: 2.4.8
  • Last update: September 2, 2024
  • Known issues: Fixed

This information is sourced from wpvulnerabilities.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Submit

Vulnerabilities

  • Input validation vulnerability in LWS Tools 2.4.1

    Fixed

    The WordPress plugin LWS Tools is vulnerable to a type of attack called Cross-Site Request Forgery. It affects any version of the plugin up to and including version 2.4.1. This kind of attack can pot...

    Read More

  • Input validation vulnerability in LWS Tools 2.3.1

    Fixed

    The LWS Tools plugin for WordPress is not secure in versions up to 2.3.1. An attacker who is not logged in can do bad things if someone with access to the website clicks on a link they provide

    Read More

  • Access violation vulnerability in 6 plugins by LWS

    Fixed

    Several plugins for WordPress created by LWS (LWS Affiliation, LWS Optimize, LWS Tools, LWS Cleaner, LWS SMS and LWS Hide Login) have a security flaw which could allow attackers with at least subscri...

    Read More