plugin

Wp Less Vulnerabilities

2 known security issues reported for the Wp Less WordPress plugin. Most recent disclosed Apr 1, 2025.

1 medium

Running Wp Less on your site? Check whether your installed version is affected.

Scan your site free

WP-LESS <= 1.9.6 - Unauthenticated Sensitive Information Disclosure

medium

The WP-LESS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.9.6. This makes it possible for unauthenticated attackers to extract sensitive user or configuration data.

CVSS:
5.3
Affected:
up to 1.9.6
Fixed in:
1.9.7
Disclosed:
Apr 1, 2025

CVE-2025-31550 on NVD →

WP-LESS [wp-less] <= 1.9.3-3 (unfixed)

unknown

[en] Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in thom4 WP-LESS allows Retrieve Embedded Sensitive Data. This issue affects WP-LESS: from 1.9.3 through 3.

Affected:
up to 1.9.3-3
Fix:
No patched version reported
Disclosed:
Apr 1, 2025

CVE-2025-31550 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database