Read the docs

binhnguyenplus

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

binhnguyenplus records in CISA KEV

No binhnguyenplus vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ladipage 7 records LOW

Records

8 records

TI-2023-04356 CVE-2023-4728 · GHSA-g293-ch5f-pcjx

LadiApp: Landing Page, PopupX, Marketing Automation, Affiliate Marketing… <= 4.4 - Missing Authorization on publish_lp()

Priority LOW 24

The LadiApp plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the publish_lp() function hooked via an AJAX action in versions up to, and including, 4.4.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00317 Published 2024-03-12 No fix listed CWE-862
TI-2023-04266 CVE-2023-4627 · GHSA-h729-53rr-wqh7

LadiApp <= 4.4 - Missing Authorization via save_config()

Priority LOW 20

The LadiApp plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_config() function in versions up to, and including, 4.4.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0034 Published 2024-03-12 No fix listed CWE-862
TI-2023-04268 CVE-2023-4629 · GHSA-5r8q-qv6x-h2vp

LadiApp <= 4.4 - Cross-Site Request Forgery via save_config()

Priority LOW 19

The LadiApp plugin for WordPress is vulnerable to Cross-Site Request Forgery due to a missing nonce check on the save_config() function in versions up to, and including, 4.3.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00208 Published 2024-03-12 No fix listed CWE-352
TI-2023-04267 CVE-2023-4628 · GHSA-7hr9-v742-j7xh

LadiApp <= 4.4 - Cross-Site Request Forgery via ladiflow_save_hook()

Priority LOW 19

The LadiApp plugin for WordPress is vulnerable to Cross-Site Request Forgery due to a missing nonce check on the ladiflow_save_hook() function in versions up to, and including, 4.4.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00208 Published 2024-03-12 No fix listed CWE-352
Open these records in search →