WordPress plugin
LadiApp: Landing Page, PopupX, Marketing Automation, Affiliate Marketing… security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium9
- Low0
All LadiApp: Landing Page, PopupX, Marketing Automation, Affiliate Marketing… vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.3 | Missing Authorization via init_endpoint ≤4.3No patch available | CVE-2023-4730 | |
| Medium4.3 | Cross-Site Request Forgery via init_endpoint ≤4.4No patch available | CVE-2023-4731 | |
| Medium4.3 | Missing Authorization via ladiflow_save_hook() 4.3 – 4.3No patch available | CVE-2023-4626 | |
| Medium4.3 | Missing Authorization on publish_lp() ≤4.4No patch available | CVE-2023-4728 | |
| Medium4.3 | Cross-Site Request Forgery via save_config() ≤4.3No patch available | CVE-2023-4629 | |
| Medium4.3 | Cross-Site Request Forgery via ladiflow_save_hook() ≤4.4No patch available | CVE-2023-4628 | |
| Medium4.3 | Missing Authorization via save_config() ≤4.4No patch available | CVE-2023-4627 | |
| Medium4.3 | Cross-Site Request Forgery via publish_lp() ≤4.4No patch available | CVE-2023-4729 | |
| Medium4.3 | Missing Authorization ≤4.3No patch available | CVE-2023-49158 |
- Medium5.3Missing Authorization via init_endpoint
≤4.3No patch available
- Medium4.3Cross-Site Request Forgery via init_endpoint
≤4.4No patch available
- Medium4.3Missing Authorization via ladiflow_save_hook()
4.3 – 4.3No patch available
- Medium4.3Missing Authorization on publish_lp()
≤4.4No patch available
- Medium4.3Cross-Site Request Forgery via save_config()
≤4.3No patch available
- Medium4.3Cross-Site Request Forgery via ladiflow_save_hook()
≤4.4No patch available
- Medium4.3Missing Authorization via save_config()
≤4.4No patch available
- Medium4.3Cross-Site Request Forgery via publish_lp()
≤4.4No patch available
- Medium4.3Missing Authorization
≤4.3No patch available
LadiApp: Landing Page, PopupX, Marketing Automation, Affiliate Marketing…: common questions
Does LadiApp: Landing Page, PopupX, Marketing Automation, Affiliate Marketing… have known vulnerabilities?
Yes. VulnCrest Radar lists 9 known vulnerabilities in LadiApp: Landing Page, PopupX, Marketing Automation, Affiliate Marketing…: 9 medium. At least one is not fixed in the latest version.
How do I check which version of LadiApp: Landing Page, PopupX, Marketing Automation, Affiliate Marketing… I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent LadiApp: Landing Page, PopupX, Marketing Automation, Affiliate Marketing… vulnerability?
CVE-2023-4730, published Aug 16, 2024: LadiApp: Landing Page, PopupX, Marketing Automation, Affiliate Marketing… <= 4.3 - Missing Authorization via init_endpoint. Severity: Medium (CVSS 5.3).
Is any LadiApp: Landing Page, PopupX, Marketing Automation, Affiliate Marketing… vulnerability listed in CISA KEV?
No. None of the known LadiApp: Landing Page, PopupX, Marketing Automation, Affiliate Marketing… vulnerabilities is currently listed in the CISA KEV catalog.