Description
WordPress Plugin Landing Page Builder-Lead Page-Optin Page-Squeeze Page-WordPress Landing Pages is prone to a local file inclusion vulnerability because it fails to sufficiently verify user-supplied input. Exploiting this issue may allow an attacker to obtain sensitive information that could aid in further attacks. WordPress Plugin Landing Page Builder-Lead Page-Optin Page-Squeeze Page-WordPress Landing Pages version 1.4.3 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.4.4 or latest
References
Related Vulnerabilities
Ruby Improper Authentication Vulnerability (CVE-2007-5162)
WordPress Plugin WP-Syntax Remote PHP Code Execution (0.9.9)
Apache HTTP Server Improper Encoding or Escaping of Output Vulnerability (CVE-2024-38474)
PHP NULL Pointer Dereference Vulnerability (CVE-2018-19395)
WordPress Ultimate Member Plugin Other Vulnerability (CVE-2022-3383)