CVE-2024-49686 MEDIUM

CVE-2024-49686: WordPress Landing Page Cat plugin <= 1.7.4 - Broken Access Control vulnerability

Vendor Fatcatapps
Product Landing Page Cat
Weakness CWE-862 · Missing authorization
Published December 31, 2024
Last update May 11, 2026
View on NVD All CVEs

CVSS base score

5.4/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

What the vulnerability does

01Description

Missing Authorization vulnerability in fatcatapps Landing Page Cat landing-page-cat.This issue affects Landing Page Cat: from n/a through <= 1.7.4.

Key dates

02Disclosure timeline

December 31, 2024 CVE published
May 11, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-32417 WordPress Pochipp plugin < 1.18.9 - Broken Access Control vulnerability CVE-2025-29007 WordPress LMSACE Connect plugin <= 3.4 - Broken Access Control Vulnerability CVE-2025-68569 WordPress WP Time Slots Booking Form plugin <= 1.2.39 - Broken Access Control vulnerability CVE-2026-0656 iPaymu Payment Gateway for WooCommerce <= 2.0.2 - Missing Authentication to Unauthenticated Payment Bypass and Order Information Disclosure CVE-2025-31789 WordPress TextMe SMS plugin <= 1.9.1 - Broken Access Control vulnerability