https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-03T20:34:18.274185+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-85574 fkie_cve-2026-85574 2026-10-03T20:34:18.277409+00:00

The Unbounce Landing Pages WordPress plugin before 1.1.5 does not perform any authorisation check when updating the configuration its front-end proxy relies on, allowing any authenticated user, such as a subscriber, to point that proxy at a host they control and have arbitrary content served from the site's own origin.

 https://vulnerability.circl.lu/vuln/ghsa-jqrj-3hxj-9rmf GHSA-jqrj-3hxj-9rmf 2026-10-03T20:34:18.277542+00:00

The Unbounce Landing Pages WordPress plugin before 1.1.5 does not perform any authorisation check when updating the configuration its front-end proxy relies on, allowing any authenticated user, such as a subscriber, to point that proxy at a host they control and have arbitrary content served from the site's own origin.