Description
Cross-Site Request Forgery (CSRF) vulnerability in Peter Shaw LH Password Changer plugin <= 1.55 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Peter Shaw | LH Password Changer | ≤ 1.55 | — |
Medium · 5.4
CVE-2023-34182
EUVD-2023-38282GHSA-6pc2-6872-wf2g
WordPress LH Password Changer Plugin <= 1.55 is vulnerable to Cross Site Request Forgery (CSRF)
Published Nov 9, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack