Landing Pages

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2015-4065 LOW POC PATCH Monitor

Cross-site scripting (XSS) vulnerability in shared/shortcodes/inbound-shortcodes.php in the Landing Pages plugin before 1.8.5 for WordPress allows remote authenticated users to inject arbitrary web. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable. Public exploit code available.

XSS WordPress PHP Landing Pages

NVD Exploit-DB

CVSS 2.0

3.5

EPSS

0.8%

CVE-2015-4064 MEDIUM POC PATCH This Month

SQL injection vulnerability in modules/module.ab-testing.php in the Landing Pages plugin before 1.8.5 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the post. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

WordPress SQLi PHP Landing Pages

NVD Exploit-DB

CVSS 2.0

6.5

EPSS

3.4%

CVE-2015-4065

EPSS 1% CVSS 3.5

LOW POC PATCH Monitor

XSS WordPress PHP +1

NVD Exploit-DB

CVE-2015-4064

EPSS 3% CVSS 6.5

MEDIUM POC PATCH This Month

WordPress SQLi PHP +1

NVD Exploit-DB