WordPress Landing Page Builder Plugin <=1.5.3.5 XSS Vulnerability Advisory

Vulnerability Overview Vulnerability Name: WordPress Landing Page Builder Plugin <= 1.5.3.5 contains a medium-priority Cross-Site Scripting (XSS) vulnerability. Vulnerability Type: Cross-Site Scripting (XSS). Priority: Medium. Publication Date: June 29, 2026. Impact Scope Affected Versions: WordPress Landing Page Builder Plugin versions <= 1.5.3.5. Risk Description: This vulnerability allows malicious attackers to inject malicious scripts, such as redirects, advertisements, and other HTML payloads, which will be executed when visitors access the website. User Interaction Requirement: Privileged user interaction is required to perform specific actions (such as clicking a malicious link, visiting a spoofed page, or submitting a form) to successfully exploit this vulnerability. Remediation Immediate Action: Update the affected plugin. If updating is not possible, contact your hosting provider or website developer for assistance. Automatic Mitigation: Patchstack has released mitigation rules to block any attacks until the patched version is installed. Updated Version: Update to version 1.5.3.6 or higher to resolve the vulnerability. Patchstack users can enable automatic updates for vulnerable plugins. Detailed Information Software: Landing Page Builder. Type: Plugin. Affected Versions: <= 1.5.3.5. Patch Version: 1.5.3.6. Timeline Reporter: HaiND. Report Date: April 21, 2026. Additional Information CVSS Score: 7.1. Risk Level: Medium. Recommendation: Remediate or resolve the vulnerability immediately. Contact Information More Information: For additional information or questions, please contact Patchstack. Subscription Subscription: Receive weekly WordPress security intelligence. Footer Information Navigation Links: Pricing, Case Studies, Login, Start Free Trial. Resources: Vulnerability Mitigation, Code Security, Bug Bounty, Use Cases, Resources, Patchstack. Summary This vulnerability involves an XSS issue in the WordPress Landing Page Builder Plugin, affecting versions <= 1.5.3.5. It is recommended to update to version 1.5.3.6 or higher immediately to fix the vulnerability.

Goal Reached Thanks to every supporter — we hit 100%!

WordPress Landing Page Builder Plugin <=1.5.3.5 XSS Vulnerability Advisory