plugin

Landing Page Cat Vulnerabilities

5 known security issues reported for the Landing Page Cat WordPress plugin. Most recent disclosed Apr 14, 2025.

5 medium

Running Landing Page Cat on your site? Check whether your installed version is affected.

Scan your site free

Landing Page Cat <= 1.7.8 - Reflected Cross-Site Scripting

medium

The Landing Page Cat plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 1.7.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfull...

CVSS:
6.1
Affected:
up to 1.7.8
Fixed in:
1.7.9
Disclosed:
Apr 14, 2025

CVE-2025-26992 on NVD →

Landing Page Cat – Coming Soon Page, Maintenance Page & Squeeze Pages <= 1.7.7 - Reflected Cross-Site Scripting

medium

The Landing Page Cat – Coming Soon Page, Maintenance Page & Squeeze Pages plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, and including, 1.7.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary...

CVSS:
6.1
Affected:
up to 1.7.7
Fixed in:
1.7.8
Disclosed:
Dec 17, 2024

CVE-2025-24576 on NVD →

Landing Page Cat – Coming Soon Page, Maintenance Page & Squeeze Pages <= 1.7.6 - Reflected Cross-Site Scripting

medium

The Landing Page Cat – Coming Soon Page, Maintenance Page & Squeeze Pages plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.7.6. This makes it possible for unauthenticated attackers to inje...

CVSS:
6.1
Affected:
up to 1.7.6
Fixed in:
1.7.7
Disclosed:
Nov 8, 2024

CVE-2024-9226 on NVD →

Landing Page Cat <= 1.7.4 - Missing Authorization

medium

The Landing Page Cat plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the custom post type added via the plugin in versions up to, and including, 1.7.4. This makes it possible for authenticated attackers, with contributor-level access and above, to edit and mo...

CVSS:
4.3
Affected:
up to 1.7.4
Fixed in:
1.7.5
Disclosed:
Oct 21, 2024

CVE-2024-49686 on NVD →

Landing Page Cat – Coming Soon Page, Maintenance Page & Squeeze Pages <= 1.7.2 - Unauthenticated Information Exposure

medium

The Landing Page Cat – Coming Soon Page, Maintenance Page & Squeeze Pages plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.7.2. This makes it possible for unauthenticated attackers to access landing pages that may not be public.

CVSS:
5.3
Affected:
up to 1.7.2
Fixed in:
1.7.3
Disclosed:
Feb 14, 2024

CVE-2024-0708 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database