WordPress plugin

WordPress Landing Pages security & vulnerabilities

Q: Does WordPress Landing Pages have known vulnerabilities?

Yes. VulnCrest Radar lists 6 known vulnerabilities in WordPress Landing Pages: 1 critical, 2 high, 3 medium. None are known to affect version null.

Q: How do I check which version of WordPress Landing Pages I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

Q: What is the most recent WordPress Landing Pages vulnerability?

8910d60c-45be-41a1-86fb-a0d60a78e660, published Jul 1, 2016: WordPress Landing Pages <= 2.2.4 - Cross-Site Scripting. Severity: Medium (CVSS 5.4).

Q: Is any WordPress Landing Pages vulnerability listed in CISA KEV?

No. None of the known WordPress Landing Pages vulnerabilities is currently listed in the CISA KEV catalog.

landing-pages— active installsLast vulnerability Jul 1, 2016

No known unpatched vulnerabilities in the latest version

All 6 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.

Watch plugin

6Known vulnerabilities

Critical1
High2
Medium3
Low0

Vulnerabilities per year

All WordPress Landing Pages vulnerabilities

WordPress Landing Pages vulnerabilities
Severity	Vulnerability	CVE	Published
Medium5.4	Cross-Site Scripting <2.2.5Update to 2.2.5	—	Jul 1, 2016
High8.8	Unauthenticated Remote Command Execution <1.9.2Update to 1.9.2	CVE-2015-5227	Sep 30, 2015
Medium6.1	Cross-Site Scripting ≤1.8.7Update to 1.8.8	CVE-2015-10090	Jun 15, 2015
High8.8	Authenticated SQL Injection <1.8.5Update to 1.8.5	CVE-2015-4064	May 25, 2015
Medium6.5	Cross-Site Scripting <1.8.5Update to 1.8.5	CVE-2015-4065	May 25, 2015
Critical9.8	SQL Injection <1.2.3Update to 1.2.3	CVE-2013-6243	Oct 10, 2013

Medium5.4
Cross-Site Scripting
<2.2.5Update to 2.2.5
8910d60c-45be-41a1-86fb-a0d60a78e660Jul 1, 2016
High8.8
Unauthenticated Remote Command Execution
<1.9.2Update to 1.9.2
CVE-2015-5227Sep 30, 2015
Medium6.1
Cross-Site Scripting
≤1.8.7Update to 1.8.8
CVE-2015-10090Jun 15, 2015
High8.8
Authenticated SQL Injection
<1.8.5Update to 1.8.5
CVE-2015-4064May 25, 2015
Medium6.5
Cross-Site Scripting
<1.8.5Update to 1.8.5
CVE-2015-4065May 25, 2015
Critical9.8
SQL Injection
<1.2.3Update to 1.2.3
CVE-2013-6243Oct 10, 2013

WordPress Landing Pages: common questions

Does WordPress Landing Pages have known vulnerabilities?

Yes. VulnCrest Radar lists 6 known vulnerabilities in WordPress Landing Pages: 1 critical, 2 high, 3 medium. None are known to affect version null.

How do I check which version of WordPress Landing Pages I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent WordPress Landing Pages vulnerability?

8910d60c-45be-41a1-86fb-a0d60a78e660, published Jul 1, 2016: WordPress Landing Pages <= 2.2.4 - Cross-Site Scripting. Severity: Medium (CVSS 5.4).

Is any WordPress Landing Pages vulnerability listed in CISA KEV?

No. None of the known WordPress Landing Pages vulnerabilities is currently listed in the CISA KEV catalog.