Skip to content
OpenAdvisories

Vendor

shawfactor

7 known vulnerabilities.

Products

LH QR Codes 1 LH OGP Meta 1 LH Email 1 LH Copy Media File 1 LH Login Page 1 LH Signing 1 LH Add Media From Url 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 4.3
    CVE-2025-9633

    LH Signing <= 2.83 - Cross-Site Request Forgery

    The LH Signing plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.83. This is due to missing or incorrect nonce validation on the plugin_options function. This makes it possible for unauthenticated attacke…

    shawfactor LH Signing Web / CMS
  • Medium 6.5
    CVE-2024-51572

    WordPress LH QR Codes plugin <= 1.06 - Stored Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in shawfactor LH QR Codes lh-qr-codes allows Stored XSS.This issue affects LH QR Codes: from n/a through <= 1.06.

    shawfactor LH QR Codes
  • Medium 6.1
    CVE-2024-9220

    LH Copy Media File <= 1.08 - Reflected Cross-Site Scripting

    The LH Copy Media File plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.08. This makes it possible for unauthenticated attacker…

    shawfactor LH Copy Media File Web / CMS
  • Medium 6.1
    CVE-2024-7090

    LH Add Media From Url <= 1.23 - Reflected Cross-Site Scripting

    The LH Add Media From Url plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘lh_add_media_from_url-file_url’ parameter in all versions up to, and including, 1.23 due to insufficient input sanitization and output escaping. This makes…

    shawfactor LH Add Media From Url Web / CMS