CVE-2026-81781: WordPress Unbounce Landing Pages plugin <= 1.1.4 - Broken Access Control vulnerability
Missing Authorization vulnerability in Unbounce Unbounce Landing Pages unbounce allows Exploiting Incorrectly Configured Access Control Security Levels.
This issue affects Unbounce Landing Pages: from n/a through 1.1.4.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Unbounce Landing Pages (WordPress plugin)to a version that resolves this vulnerability.Fixed in 1.1.4 - Upgrade
Upgrade
Unbounce Landing Pages (WordPress plugin)to a version that resolves this vulnerability.Patch Broken Access Control vulnerability
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
The vulnerability requires low-level privileges (PR:L). It is remotely exploitable over the network and does not require user interaction.
What is the potential impact if exploitation succeeds?
Successful exploitation can affect integrity and availability, with low integrity impact and high availability impact. No confidentiality impact is indicated.
Which plugin versions are affected?
Unbounce Landing Pages versions through 1.1.4 are affected. The provided data does not identify a fixed version.