Skip to content
OpenAdvisories

Vendor

aurelienlws

3 known vulnerabilities.

Products

LWS Optimize – All-in-One Speed Booster & Cache Tools 1 LWSCache 1 LWS Cleaner 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2025-8575

    LWS Cleaner <= 2.4.1.3 - Authenticated (Administrator+) Arbitrary File Deletion via 'lws_cl_delete_file'

    The LWS Cleaner plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'lws_cl_delete_file' function in all versions up to, and including, 2.4.1.3. This makes it possible for authenticated attackers, with…

    aurelienlws LWS Cleaner Web / CMS