Vulnerabilities in binhnguyenplus
8 resultsVexday analysis
O fornecedor binhnguyenplus apresenta 8 vulnerabilidades catalogadas, nenhuma delas sob exploração ativa conhecida ou com severidade crítica. A fraqueza predominante é falha de proteção contra falsificação de requisição entre sites (CWE-352), e não há descobertas recentes, indicando um risco contido e de baixa prioridade no cenário atual.
CVE-2023-4730MEDIUMLadiApp: Landing Page, PopupX, Marketing Automation, Affiliate Marketing… <= 4.3 - Missing Authorization via init_endpointEPSS 0.5%CVE-2023-4627MEDIUMLadiApp <= 4.4 - Missing Authorization via save_config()EPSS 0.3%CVE-2023-4626MEDIUMThe LadiApp plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ladiflow_save_hEPSS 0.3%CVE-2023-4728MEDIUMLadiApp: Landing Page, PopupX, Marketing Automation, Affiliate Marketing… <= 4.4 - Missing Authorization on publish_lp()EPSS 0.3%CVE-2023-4731MEDIUMLadiApp: Landing Page, PopupX, Marketing Automation, Affiliate Marketing… <= 4.4 - Cross-Site Request Forgery via init_endpointEPSS 0.3%CVE-2023-4628MEDIUMLadiApp <= 4.4 - Cross-Site Request Forgery via ladiflow_save_hook()EPSS 0.2%CVE-2023-4729MEDIUMLadiApp: Landing Page, PopupX, Marketing Automation, Affiliate Marketing… <= 4.4 - Cross-Site Request Forgery via publish_lp()EPSS 0.2%CVE-2023-4629MEDIUMLadiApp <= 4.4 - Cross-Site Request Forgery via save_config()EPSS 0.2%