Skip to content
Shawfactor vulnerabilities
Newest
-
shawfactor lh signing
LH Signing <= 2.83 - Cross-Site Request Forgery
CVE-2025-9633
4.3 Medium
-
shawfactor lh ogp meta
WordPress LH OGP Meta plugin <= 1.73 - CSRF to Stored XSS Vulnerability
CVE-2025-30587
7.1 High
-
notfound lh email
WordPress LH Email plugin <= 1.12 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-23676
7.1 High
-
peter shaw lh login page
WordPress LH Login Page plugin <= 2.14 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-23547
7.1 High
-
peter shaw lh qr codes
WordPress LH QR Codes plugin <= 1.06 - Stored Cross Site Scripting (XSS) vulnerability
CVE-2024-51572
6.5 Medium
-
petershaw lh copy media file
LH Copy Media File <= 1.08 - Reflected Cross-Site Scripting
CVE-2024-9220
6.1 Medium
-
shawfactor lh add media from url
LH Add Media From Url <= 1.23 - Reflected Cross-Site Scripting
CVE-2024-7090
6.1 Medium
-
peter shaw lh add media from url
WordPress LH Add Media From Url plugin <= 1.22 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-32533
7.1 High
-
peter shaw lh password changer, shawfactor lh-password-changer +1 more
WordPress LH Password Changer Plugin <= 1.55 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-34182
5.4 Medium