CVE-2026-85574

CVE-2026-85574 affects the Unbounce Landing Pages WordPress plugin versions 1.1.1 through 1.1.4. The plugin fails to perform an authorization check when updating the configuration its front-end proxy relies on (via the set_unbounce_domains endpoint). This allows any authenticated user with subscr...