Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

CVE-2026-125854

WordPress Unbounce Landing Pages plugin <= 1.1.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unbounce Unbounce Landing Pages unbounce allows Stored XSS.This issue affects Unbounce Landing Pages: from n/a through 1.1.6.

CVSS 3.1 · 7.1 High EPSS n/a KEV · Not listed
Vendors
Unbounce Wordpress-extensions
Products
Unbounce Landing Pages Unbounce Landing Pages
CVE-2026-85574

Unbounce Landing Pages 1.1.1 - 1.1.4 - Subscriber+ Reverse-Proxy Target Hijack via set_unbounce_domains

The Unbounce Landing Pages WordPress plugin before 1.1.5 does not perform any authorisation check when updating the configuration its front-end proxy relies on, allowing any authenticated user, such as a subscriber, to point that proxy at a host they control and have arbitrary content served from the site's own origin.

CVSS 3.1 · 8 High EPSS < 1% KEV · Not listed
Vendors
Wordpress-extensions
Products
Unbounce Landing Pages