Lws Optimize
Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:lws_optimize:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Lws Optimize (da0e82c7-44cf-5d76-9243-c5417b43c6e8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-16032 |
vulnerable | 2026-09-16 04:32:56.826965 |
LWS Optimize < 4.1.2 - Unauthenticated Stored XSS via Real User Monitoring
The LWS Optimize WordPress plugin before 4.1.2 does not properly escape a value submitted through an unauthenticated analytics endpoint before storing it and rendering it in an administrative dashboard, allowing unauthenticated attackers to inject arbitrary web scripts that execute when an administrator views the affected dashboard page.
Published: 2026-08-09T06:00:14.263Z
Updated: 2026-08-10T19:29:25.657Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-16042 |
vulnerable | 2026-09-16 04:32:56.664253 |
LWS Optimize < 3.4 - Subscriber+ Cache Deletion
The LWS Optimize WordPress plugin before 3.4 does not perform a capability check on its cache-clearing actions, allowing any authenticated user, including Subscribers, to flush the site's caches and force repeated cache rebuilds.
Published: 2026-08-02T06:00:11.461Z
Updated: 2026-08-04T17:42:33.193Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.