Ladipage

Ladipage

7 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2023-4728

  • EPSS 0.1%
  • Veröffentlicht 12.03.2024 10:15:08
  • Zuletzt bearbeitet 15.01.2025 16:31:50

The LadiApp plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the publish_lp() function hooked via an AJAX action in versions up to, and including, 4.4. This makes it possible for authenticat...

4.3

CVE-2023-4729

  • EPSS 0.2%
  • Veröffentlicht 12.03.2024 10:15:08
  • Zuletzt bearbeitet 15.01.2025 16:31:19

The LadiApp plugin for WordPress is vulnerable to Cross-Site Request Forgery due to a missing nonce check on the publish_lp() function hooked via an AJAX action in versions up to, and including, 4.4. This makes it possible for unauthenticated attacke...

4.3

CVE-2023-4731

  • EPSS 0.21%
  • Veröffentlicht 12.03.2024 10:15:08
  • Zuletzt bearbeitet 15.01.2025 16:31:04

The LadiApp plugn for WordPress is vulnerable to Cross-Site Request Forgery due to a missing nonce check on the init_endpoint() function hooked via 'init' in versions up to, and including, 4.4. This makes it possible for unauthenticated attackers to ...

4.3

CVE-2023-4627

  • EPSS 0.11%
  • Veröffentlicht 12.03.2024 10:15:07
  • Zuletzt bearbeitet 15.01.2025 16:37:02

The LadiApp plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_config() function in versions up to, and including, 4.4. This makes it possible for authenticated attackers with subscri...

4.3

CVE-2023-4628

  • EPSS 0.17%
  • Veröffentlicht 12.03.2024 10:15:07
  • Zuletzt bearbeitet 15.01.2025 16:35:45

The LadiApp plugin for WordPress is vulnerable to Cross-Site Request Forgery due to a missing nonce check on the ladiflow_save_hook() function in versions up to, and including, 4.4. This makes it possible for unauthenticated attackers to update the '...

4.3

CVE-2023-4629

  • EPSS 0.16%
  • Veröffentlicht 12.03.2024 10:15:07
  • Zuletzt bearbeitet 15.01.2025 16:34:12

The LadiApp plugin for WordPress is vulnerable to Cross-Site Request Forgery due to a missing nonce check on the save_config() function in versions up to, and including, 4.3. This makes it possible for unauthenticated attackers to update the 'ladipag...

4.3

CVE-2023-4626

  • EPSS 0.11%
  • Veröffentlicht 12.03.2024 10:15:06
  • Zuletzt bearbeitet 21.01.2025 21:11:36

The LadiApp plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ladiflow_save_hook() function in versions up to, and including, 4.3. This makes it possible for authenticated attackers with ...