Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
LadipageLadipage

7 matches found

CVE
CVE•added 2024/03/12 10:15 a.m.•53 views

CVE-2023-4629

The LadiApp plugin for WordPress is vulnerable to Cross-Site Request Forgery due to a missing nonce check on the save_config() function in versions up to, and including, 4.3. This makes it possible for unauthenticated attackers to update the 'ladipage_config' option via a forged request granted the...

4.3CVSS5.2AI score0.00156EPSS
CVE
CVE•added 2024/03/12 10:15 a.m.•53 views

CVE-2023-4728

The LadiApp plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the publish_lp() function hooked via an AJAX action in versions up to, and including, 4.4. This makes it possible for authenticated attackers with subscriber-level access and abo...

5.4CVSS5AI score0.00126EPSS
CVE
CVE•added 2024/03/12 10:15 a.m.•48 views

CVE-2023-4626

The LadiApp plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ladiflow_save_hook() function in versions up to, and including, 4.3. This makes it possible for authenticated attackers with subscriber-level access and above to update the '...

4.3CVSS4.6AI score0.00134EPSS
CVE
CVE•added 2024/03/12 10:15 a.m.•46 views

CVE-2023-4627

The LadiApp plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_config() function in versions up to, and including, 4.4. This makes it possible for authenticated attackers with subscriber-level access and above to update the 'ladipag...

4.3CVSS4.6AI score0.00107EPSS
CVE
CVE•added 2024/03/12 10:15 a.m.•46 views

CVE-2023-4729

The LadiApp plugin for WordPress is vulnerable to Cross-Site Request Forgery due to a missing nonce check on the publish_lp() function hooked via an AJAX action in versions up to, and including, 4.4. This makes it possible for unauthenticated attackers to change the LadiPage key (a key fully contro...

4.3CVSS5AI score0.00204EPSS
CVE
CVE•added 2024/03/12 10:15 a.m.•46 views

CVE-2023-4731

The LadiApp plugn for WordPress is vulnerable to Cross-Site Request Forgery due to a missing nonce check on the init_endpoint() function hooked via 'init' in versions up to, and including, 4.4. This makes it possible for unauthenticated attackers to modify a variety of settings, via a forged reques...

4.3CVSS5.2AI score0.00212EPSS
CVE
CVE•added 2024/03/12 10:15 a.m.•43 views

CVE-2023-4628

The LadiApp plugin for WordPress is vulnerable to Cross-Site Request Forgery due to a missing nonce check on the ladiflow_save_hook() function in versions up to, and including, 4.4. This makes it possible for unauthenticated attackers to update the 'ladiflow_hook_configs' option via a forged reques...

4.3CVSS5.2AI score0.00173EPSS