Description
Cross-Site Request Forgery (CSRF) vulnerability in LWS LWS Hide Login plugin <= 2.1.6 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| LWS | LWS Hide Login | ≤ 2.1.6 | — |
Medium · 5.4
CVE-2023-34025
EUVD-2023-38149GHSA-6323-95v6-6cw7
WordPress LWS Hide Login Plugin <= 2.1.6 is vulnerable to Cross Site Request Forgery (CSRF)
Published Nov 9, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack