WordPress Plugin Vulnerabilities

WordPress Landing Pages <= 1.8.4 - XSS & SQL Injection

Description

The WordPress Landing Pages WordPress plugin was affected by a XSS & SQL Injection security vulnerability.

Affects Plugins

Plugin icon
landing-pages
Fixed in 1.8.5

References

CVE
CVE-2015-4064
CVE
CVE-2015-4065
Exploitdb
37108
URL
https://packetstormsecurity.com/files/#132037/

Miscellaneous

Submitter
pvdl
Verified
No
WPVDB ID
c959d28d-121b-47e2-a32f-fc1ee7f202f9

Timeline

Publicly Published
2015-05-25 (about 8 years ago)
Added
2015-05-26 (about 8 years ago)
Last Updated
2019-10-21 (about 4 years ago)

Other

Published
Title
Published
2016-02-03
Title
WP-Invoice <= 4.1.0 - Multiple Vulnerabilities
Published
2020-01-10
Title
EasyBook < 1.2.2 - Multiple Vulnerabilities
Published
2015-07-02
Title
WordPress File Upload < 3.0.0 - Multiple Vulnerabilities
Published
2020-02-24
Title
Ultimate Membership Pro < 8.6.2 - Multiple CSRF Issues via AJAX Calls, Insufficient Filename Entropy
Published
2019-07-10
Title
File Manager < 5.2 - Multiple Vulnerabilities