CVE-2026-81781

HighCVSS 7.1

Published: 08/09/2026(UTC)Updated: 08/09/2026(UTC)Translated: 08/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.18%

8th percentile - higher than 8% of all known CVEs

Summary

Missing Authorization vulnerability in Unbounce Landing Pages versions up to 1.1.4. Allows exploiting incorrectly configured access control security levels, potentially leading to unauthorized actions.

Risk Assessment

An attacker can exploit missing authorization to modify settings, access sensitive data, or perform unauthorized operations, potentially compromising system integrity.

Recommendation

Immediately update the Unbounce Landing Pages plugin to a version newer than 1.1.4, which contains a fix for this vulnerability.

Other vulnerabilities in Unbounce Landing Pages

CVE-2026-85574High
The Unbounce Landing Pages WordPress plugin before 1.1.5 does not perform any authorisation check when updating the configuration its front-end proxy relies on, allowing any authenticated user, such as a subscriber, to point that proxy at a host they control and have arbitrary content served from the site's own origin.

Original NVD description (English source)

Missing Authorization vulnerability in Unbounce Unbounce Landing Pages unbounce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Unbounce Landing Pages: from n/a through 1.1.4.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS