CVE-2023-48325

CVE-2023-48325: Open Redirect in Landing Page Builder – Lead Page – Optin Page – Squeeze Page – WordPress Landing Pages (PluginOps Landing Page Builder) up to version 1.5.1.5. Root cause: insufficient validation of the redirect URL, enabling URL redirection to an untrusted site. Impact: informati...

CVE-2022-4718

The CVE-2022-4718 entry concerns the Landing Page Builder WordPress plugin prior to 1.4.9.9. The vulnerability arises because the plugin does not validate and escape certain shortcode attributes before echoing them in the page, enabling Stored Cross-Site Scripting via attacker-controlled shortcod...

CVE-2023-40675

CVE-2023-40675 refers to a Stored Cross-Site Scripting (XSS) vulnerability in the PluginOps Landing Page Builder plugin for WordPress, affecting versions up to 1.5.1.2. The vulnerability requires authentication with admin+ privileges and is classified as a stored XSS issue (no explicit exploit de...