Lucene search

K
wpvulndbWpvulndbWPVDB-ID:4BC3BC3C-38BE-4AC2-B471-6D98B9F32822
HistoryNov 29, 2023 - 12:00 a.m.

Landing Page Builder < 1.5.1.6 - Open Redirect

2023-11-2900:00:00
wpscan.com
3
landing page builder
open redirect
vulnerability
wordpress

AI Score

7

Confidence

Low

EPSS

0.001

Percentile

17.0%

Description The Landing Page Builder – Lead Page – Optin Page – Squeeze Page – WordPress Landing Pages plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 1.5.1.5. This is due to insufficient validation on the redirect url supplied via user input or request parameter. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action.

AI Score

7

Confidence

Low

EPSS

0.001

Percentile

17.0%

Related for WPVDB-ID:4BC3BC3C-38BE-4AC2-B471-6D98B9F32822