Vulnerabilities > Ladipage
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-03-12 | CVE-2023-4629 | Cross-Site Request Forgery (CSRF) vulnerability in Ladipage The LadiApp plugin for WordPress is vulnerable to Cross-Site Request Forgery due to a missing nonce check on the save_config() function in versions up to, and including, 4.3. | 4.3 |
| 2024-03-12 | CVE-2023-4728 | Cross-site Scripting vulnerability in Ladipage The LadiApp plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the publish_lp() function hooked via an AJAX action in versions up to, and including, 4.4. | 5.4 |
| 2024-03-12 | CVE-2023-4729 | Cross-Site Request Forgery (CSRF) vulnerability in Ladipage The LadiApp plugin for WordPress is vulnerable to Cross-Site Request Forgery due to a missing nonce check on the publish_lp() function hooked via an AJAX action in versions up to, and including, 4.4. | 4.3 |
| 2024-03-12 | CVE-2023-4731 | Cross-Site Request Forgery (CSRF) vulnerability in Ladipage The LadiApp plugn for WordPress is vulnerable to Cross-Site Request Forgery due to a missing nonce check on the init_endpoint() function hooked via 'init' in versions up to, and including, 4.4. | 4.3 |