Loword vulnerabilities
We track 1 vulnerability in Loword products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 16, 2025.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Loword vulnerabilities
- 7.5 High severity
AL Pack: Missing Authorization
The AL Pack plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the check_activate_permission() permission callback for the /wp-json/presslearn/v1/activate REST API endpoint in all versions up to, and including, 1.1.1