https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T20:13:20.859999+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-4629 CVE-2023-4629 — LadiApp <= 4.4 - Cross-Site Request Forgery via save_config() 2026-10-12T20:13:20.861142+00:00

Affected: binhnguyenplus LadiApp: Landing Page, PopupX, Marketing Automation, Affiliate Marketing…

The LadiApp plugin for WordPress is vulnerable to Cross-Site Request Forgery due to a missing nonce check on the save_config() function in versions up to, and including, 4.3. This makes it possible for unauthenticated attackers to update the 'ladipage_config' option via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.