Skip to content
OpenAdvisories

Vendor

umarbajwa

4 known vulnerabilities.

Products

MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder 1 Notification Bar 1 Social Feed | All social media in one place 1 Landing Page Builder – Coming Soon page, Maintenance Mode, Lead Page, WordPress Landing Pages 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-12409

    Landing Page Builder <= 1.5.3.6 - Cross-Site Request Forgery to ulpb_admin_data AJAX Action

    The Landing Page Builder – Coming Soon page, Maintenance Mode, Lead Page, WordPress Landing Pages plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.3.6. This is due to missing or incorrect nonce validat…

    umarbajwa Landing Page Builder – Coming Soon page, Maintenance Mode, Lead Page, WordPress Landing Pages Web / CMS
  • Medium 4.3
    CVE-2025-9895

    Notification Bar <= 2.2 - Cross-Site Request Forgery

    The Notification Bar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2. This is due to missing or incorrect nonce validation on the 'subscriber-list-empty.php' file. This makes it possible for unauthent…

    umarbajwa Notification Bar Web / CMS
  • Medium 6.4
    CVE-2023-5661

    Social Feed <= 1.5.4.6 - Authenticated (Author+) Stored Cross-Site Scripting via Shortcode

    The Social Feed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'socialfeed' shortcode in all versions up to, and including, 1.5.4.6 due to insufficient input sanitization and output escaping on user supplied attributes. Thi…

    umarbajwa Social Feed | All social media in one place Web / CMS