Input validation vulnerability in Landing Page Builder – Coming Soon page, Maintenance Mode, Lead Page, WordPress Landing Pages 1.5.2.0

The Landing Page Builder – Coming Soon page, Maintenance Mode, Lead Page, and WordPress Landing Pages plugin for WordPress are at risk of a security flaw known as Local File Inclusion. This means that hackers with Editor-level access or higher can include and run any files on the server, including PHP files. This can be used to bypass security measures, access private information, or even run malicious code. This vulnerability exists in all versions up to and including 1.5.2.0.

Detected in:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.