← Back

Landing Pages Project

landing_pages_project

3 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Landing Pages
landing_pages
2 CVEs
Landing Pages Plugin
landing_pages_plugin
1 CVE

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2015-4065
1Landing Pages Project
1Landing Pages
May 6, 2026
May 27, 2015
N/A· v4
N/A· v3
3.5 LOW· v2
Cross-site scripting (XSS) vulnerability in shared/shortcodes/inbound-shortcodes.php in the Landing Pages plugin before 1.8.5 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the...Show more
Cross-site scripting (XSS) vulnerability in shared/shortcodes/inbound-shortcodes.php in the Landing Pages plugin before 1.8.5 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the post parameter to wp-admin/post-new.php.Show less
CVE-2015-4064
1Landing Pages Project
1Landing Pages
May 6, 2026
May 27, 2015
N/A· v4
N/A· v3
6.5 MEDIUM· v2
SQL injection vulnerability in modules/module.ab-testing.php in the Landing Pages plugin before 1.8.5 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the post parameter in an edit de...Show more
SQL injection vulnerability in modules/module.ab-testing.php in the Landing Pages plugin before 1.8.5 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the post parameter in an edit delete-variation action to wp-admin/post.php.Show less
CVE-2013-6243
1Landing Pages Project
1Landing Pages Plugin
Apr 29, 2026
Oct 23, 2013
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in the Landing Pages plugin 1.2.3, before 20131009, and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the "post" parameter to index.php.