CVE-2025-8147 in LWSCache Plugin信息

摘要

由 MITRE • 2025-08-29

The LWSCache plugin for WordPress is vulnerable to unauthorized modification of data due to improper authorization on the lwscache_activatePlugin() function in all versions up to, and including, 2.8.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to activate arbitrary whitelisted LWS plugins.

Once again VulDB remains the best source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

披露

2025-08-29

管理

已接受

条目

VDB-321816

CPE

准备好

CWE

CWE-862 (已确认)

CVSS

4.3 (CNA)

EPSS

0.00242

KEV

否

活动

非常低

部门

Hostingprovider

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2025-8147
NVD	https://nvd.nist.gov/vuln/detail/CVE-2025-8147
CVE Details	https://www.cvedetails.com/cve/CVE-2025-8147/

◂ 上一步一览下一步 ▸

Do you need the next level of professionalism?

Upgrade your account now!