Landing Pages

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2015-4065 May 27, 18:59 LOW POC PATCH Monitor

Cross-site scripting (XSS) vulnerability in shared/shortcodes/inbound-shortcodes.php in the Landing Pages plugin before 1.8.5 for WordPress allows remote authenticated users to inject arbitrary web. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable. Public exploit code available.

PHP WordPress XSS Wordpress Plugin Landing Pages +1

NVD Exploit-DB

CVSS 2.0

3.5

EPSS

0.8%

CVE-2015-4064 May 27, 18:59 MEDIUM POC PATCH This Month

SQL injection vulnerability in modules/module.ab-testing.php in the Landing Pages plugin before 1.8.5 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the post. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

PHP WordPress SQLi Wordpress Plugin Landing Pages +1

NVD Exploit-DB

CVSS 2.0

6.5

EPSS

3.4%

CVE-2015-4065

EPSS 1% CVSS 3.5

LOW POC PATCH Monitor

PHP WordPress XSS +3

NVD Exploit-DB

CVE-2015-4064

EPSS 3% CVSS 6.5

MEDIUM POC PATCH This Month

PHP WordPress SQLi +3

NVD Exploit-DB