WordPress Plugin Keap Official Opt-in Forms Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

WordPress Keap Official Opt-in Forms Plugin <= 2.0.1 is vulnerable to Cross Site Scripting (XSS)

Software Keap Official Opt-in Forms Type Plugin Vulnerable versions = 2.0.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-52192 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 43abbc32aaec Credits Ngô Thiên An ancorn from...

Keap Official Opt-in Forms <= 1.0.11 - Admin+ Stored XSS

Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example, in multisite setup. 1. Store the script in non-sanitized...

Keap Official Opt-in Forms <= 1.0.11 - Admin+ Stored XSS

Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example, in multisite setup. PoC 1. Store the script in...

CVE-2023-44241

Cross-Site Request Forgery CSRF vulnerability in Keap Keap Landing Pages plugin = 1.4.2 versions...

CVE-2023-44241

Cross-Site Request Forgery CSRF vulnerability in Keap Keap Landing Pages plugin = 1.4.2 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Keap Keap Landing Pages plugin = 1.4.2 versions...

CVE-2023-44241 WordPress Keap Landing Pages Plugin <= 1.4.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Keap Keap Landing Pages plugin = 1.4.2 versions...

CVE-2023-44241 WordPress Keap Landing Pages Plugin <= 1.4.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Keap Keap Landing Pages plugin = 1.4.2 versions...

CVE-2023-44241

CVE-2023-44241 — Keap Landing Pages (WordPress) CSRF . Affected software is the Keap Landing Pages plugin (WordPress) version

WordPress Keap Landing Pages Plugin <= 1.4.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software Keap Landing Pages Type Plugin Vulnerable versions = 1.4.2 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-44241 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 0f85172ed449 Credits Nguyen Xuan Chien...