Skip to content
OpenAdvisories

Vendor

rodgerholl

1 known vulnerabilities.

Products

Visitor Logic Lite 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2025-14044

    Visitor Logic Lite <= 1.0.3 - Unauthenticated PHP Object Injection via 'lpblocks' Cookie

    The Visitor Logic Lite plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.0.3 via deserialization of untrusted input from the `lpblocks` cookie. This is due to the `lp_track()` function passing unsanitized cooki…

    rodgerholl Visitor Logic Lite Web / CMS