plugin

Infusionsoft Landing Pages Vulnerabilities

2 known security issues reported for the Infusionsoft Landing Pages WordPress plugin. Most recent disclosed Oct 10, 2023.

1 medium

Running Infusionsoft Landing Pages on your site? Check whether your installed version is affected.

Scan your site free

Keap Landing Pages [infusionsoft-landing-pages] <= 1.4.2 (unfixed + closed)

unknown

[en] Cross-Site Request Forgery (CSRF) vulnerability in Keap Keap Landing Pages plugin <= 1.4.2 versions.

Affected:
up to 1.4.2
Fix:
No patched version reported
Disclosed:
Oct 10, 2023

CVE-2023-44241 on NVD →

Keap Landing Pages <= 1.4.2 - Cross-Site Request Forgery

medium

The Keap Landing Pages plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.4.2. This is due to missing or incorrect nonce validation on the editLandingPages() function. This makes it possible for unauthenticated attackers to modify the plugin's settings via a forged requ...

CVSS:
4.3
Affected:
up to 1.4.2
Fix:
No patched version reported
Disclosed:
Sep 29, 2023

CVE-2023-44241 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database