Skip to content
OpenAdvisories

Vendor

aurelienlws

3 known vulnerabilities.

Products

LWS Optimize – All-in-One Speed Booster & Cache Tools 1 LWSCache 1 LWS Cleaner 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.9
    CVE-2026-12089

    WS Optimize – All-in-One Speed Booster & Cache Tools <= 3.3.19 - Authenticated (Editor+) Arbitrary File Read

    The LWS Optimize – All-in-One Speed Booster & Cache Tools plugin for WordPress is vulnerable to Arbitrary File Read in versions up to, and including, 3.3.19. This is due to the combine_current_css() function trusting <link rel="stylesheet" href="..."> values …

    aurelienlws LWS Optimize – All-in-One Speed Booster & Cache Tools Web / CMS
  • Medium 4.3
    CVE-2025-8147

    LWSCache <= 2.8.5 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Activation via lwscache_activatePlugin Function

    The LWSCache plugin for WordPress is vulnerable to unauthorized modification of data due to improper authorization on the lwscache_activatePlugin() function in all versions up to, and including, 2.8.5. This makes it possible for authenticated attackers, with …

    aurelienlws LWSCache Web / CMS