WordPress security by component
LWS Cleaner
Plugin description
LWS Cleaner is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Sep 12, 2025; the highest CVE/CNA score is 7.2.
Plugin slug:
lws-cleanerLatest vulnerability
CVE-2025-8575: LWS Cleaner: Code execution
LWS Cleaner is affected by code execution. Exploitation requires at least administrator-level access. Successful exploitation can run attacker-controlled code in the WordPress hosting account.
| Safe version |
|
||
|---|---|---|---|
| Sep 12, 2025 |
CVE-2025-8575
LWS Cleaner: Code execution
LWS Cleaner is affected by code execution. Exploitation requires at least administrator-level access. Successful exploitation can run attacker-controlled code in the WordPress hosting account.
|
See mitigation notes |
CVE7.2
NVDPending
|
| Jul 11, 2023 |
CVE-2023-35781
Lws Cleaner: Cross-site request forgery
Lws Cleaner is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
|
See mitigation notes |
CVE5.4
NVD8.8
|