Skip to content
OpenAdvisories

Vendor

shawfactor

7 known vulnerabilities.

Products

LH QR Codes 1 LH OGP Meta 1 LH Email 1 LH Copy Media File 1 LH Login Page 1 LH Signing 1 LH Add Media From Url 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.1
    CVE-2025-30587

    WordPress LH OGP Meta plugin <= 1.73 - CSRF to Stored XSS Vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in shawfactor LH OGP Meta lh-ogp-meta-tags allows Stored XSS.This issue affects LH OGP Meta: from n/a through <= 1.73.

    shawfactor LH OGP Meta
  • High 7.1
    CVE-2025-23676

    WordPress LH Email plugin <= 1.12 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in shawfactor LH Email lh-email allows Reflected XSS.This issue affects LH Email: from n/a through <= 1.12.

    shawfactor LH Email
  • High 7.1
    CVE-2025-23547

    WordPress LH Login Page plugin <= 2.14 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in shawfactor LH Login Page lh-login-page allows Reflected XSS.This issue affects LH Login Page: from n/a through <= 2.14.

    shawfactor LH Login Page