PatchTheCVElanding pages project vulnerabilities
Recent CVEs affecting landing pages project products. 3 tracked.
landing pages project has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2015-05-27. Highest priority: CVE-2013-6243 (score 52/100).
- CVE-2015-4065 LOW 3.5 UPGRADE Cross-site scripting (XSS) vulnerability in shared/shortcodes/inbound-shortcodes.php in the Landing Pages plug
- CVE-2015-4064 MEDIUM 6.5 UPGRADE SQL injection vulnerability in modules/module.ab-testing.php in the Landing Pages plugin before 1.8.5 for Word
- CVE-2013-6243 HIGH 7.5 UPGRADE SQL injection vulnerability in the Landing Pages plugin 1.2.3, before 20131009, and earlier for WordPress allo
FAQ
How do I fix landing pages project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is landing pages project being exploited right now?
None of the tracked landing pages project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which landing pages project CVE should I patch first?
CVE-2013-6243 currently ranks highest (52/100): SQL injection vulnerability in the Landing Pages plugin 1.2.3, before 20131009, and earlier for WordPress allo.