LadiApp: Landing Page, PopupX, Marketing Automation, Affiliate Marketing…
ladipage · plugin
Known security vulnerabilities for LadiApp: Landing Page, PopupX, Marketing Automation, Affiliate Marketing…. Find out in seconds which version runs on your site with WP Lens.
9 known vulnerabilities
latest Dec 9, 2024
Vulnerabilities
- High 7.1
WordPress LadiApp plugin <= 4.4 - Broken Access Control lead to XSS vulnerability
- Medium 5.4
LadiApp: Landing Page, PopupX, Marketing Automation, Affiliate Marketing… <= 4.4 - Missing Authorization on publish_lp()
- Medium 5.3
LadiApp: Landing Page, PopupX, Marketing Automation, Affiliate Marketing… <= 4.3 - Missing Authorization via init_endpoint
- Medium 4.3
LadiApp: Landing Page, PopupX, Marketing Automation, Affiliate Marketing… <= 4.4 - Cross-Site Request Forgery via init_endpoint
- Medium 4.3
LadiApp: Landing Page, PopupX, Marketing Automation, Affiliate Marketing… <= 4.4 - Cross-Site Request Forgery via publish_lp()
- Medium 4.3
LadiApp <= 4.4 - Cross-Site Request Forgery via save_config()
- Medium 4.3
LadiApp <= 4.4 - Cross-Site Request Forgery via ladiflow_save_hook()
- Medium 4.3
LadiApp <= 4.4 - Missing Authorization via save_config()
- Medium 4.3
The LadiApp plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ladiflow_save_h