Skip to content
OpenAdvisories

Product · aurelienlws

LWS Optimize – All-in-One Speed Booster & Cache Tools

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 4.9

    WS Optimize – All-in-One Speed Booster & Cache Tools <= 3.3.19 - Authenticated (Editor+) Arbitrary File Read

    The LWS Optimize – All-in-One Speed Booster & Cache Tools plugin for WordPress is vulnerable to Arbitrary File Read in versions up to, and including, 3.3.19. This is due to the combine_current_css() function trusting <link rel="stylesheet" href="..."> values …