Bbinhnguyenplus

Products

Exploited and recent CVEs

• CVE-2023-4730 Medium 5.3 LadiApp: Landing Page, PopupX, Marketing Automation, Affiliate Marketing… <= 4.3 - Missing Authorization via init_endpoint 0.5%
• CVE-2023-4629 Medium 4.3 LadiApp <= 4.4 - Cross-Site Request Forgery via save_config() 0.2%
• CVE-2023-4729 Medium 4.3 LadiApp: Landing Page, PopupX, Marketing Automation, Affiliate Marketing… <= 4.4 - Cross-Site Request Forgery via publish_lp() 0.2%
• CVE-2023-4627 Medium 4.3 LadiApp <= 4.4 - Missing Authorization via save_config() 0.3%
• CVE-2023-4728 Medium 4.3 LadiApp: Landing Page, PopupX, Marketing Automation, Affiliate Marketing… <= 4.4 - Missing Authorization on publish_lp() 0.3%
• CVE-2023-4626 Medium 4.3 The LadiApp plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ladiflow_save_hook() function in versions up to, and including, 4.3. This m 0.3%
• CVE-2023-4731 Medium 4.3 LadiApp: Landing Page, PopupX, Marketing Automation, Affiliate Marketing… <= 4.4 - Cross-Site Request Forgery via init_endpoint 0.3%
• CVE-2023-4628 Medium 4.3 LadiApp <= 4.4 - Cross-Site Request Forgery via ladiflow_save_hook() 0.2%