Filtered by vendor Lws Subscriptions
Filtered by product Affiliation Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-57934 2 Lws, Wordpress 2 Affiliation, Wordpress 2025-09-23 4.3 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Aurélien LWS LWS Affiliation allows Cross Site Request Forgery. This issue affects LWS Affiliation: from n/a through 2.3.6.
CVE-2023-32297 1 Lws 1 Affiliation 2024-11-21 9 Critical
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in LWS LWS Affiliation allows PHP Local File Inclusion.This issue affects LWS Affiliation: from n/a through 2.2.6.
CVE-2024-43962 1 Lws 1 Affiliation 2024-11-08 5.4 Medium
Missing Authorization vulnerability in LWS LWS Affiliation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LWS Affiliation: from n/a through 2.3.4.