CVE-2023-40675mediumCWE-79

CVE-2023-40675: falha de média gravidade em PluginOps Landing Page Builder

WordPress Landing Page Builder Plugin <= 1.5.1.2 is vulnerable to Cross Site Scripting (XSS)

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Landing Page Builder

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.9epss 0.4%
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PluginOps Landing Page Builder plugin <= 1.5.1.2 versions.
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
Produtos afetados
PluginOps · Landing Page Builder
CVEs relacionadas — PluginOps Landing Page Builder

No mesmo produto, das mais perigosas para as menos.

CVE-2024-43345HIGHWordPress Landing Page Builder plugin <= 1.5.2.0 - Local File Inclusion vulnerabilityEPSS 0.5%CVE-2024-30452MEDIUMWordPress Landing Page Builder plugin <= 1.5.1.7 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2024-34752HIGHWordPress Landing Page Builder <= 1.5.1.8 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-57337HIGHWordPress Landing Page Builder plugin <= 1.5.3.5 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-24620MEDIUMWordPress Landing Page Builder plugin <= 1.5.3.4 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%