Browse all 3 CVE security advisories affecting LJ Apps. AI-powered Chinese analysis, POCs, and references for each vulnerability.
LJ Apps develops mobile and web applications with a focus on social networking and productivity tools. Historically, the organization has faced vulnerabilities including remote code execution, cross-site scripting, and privilege escalation, often stemming from insufficient input validation and authentication flaws. While no major public security incidents have been documented, the three CVEs on record highlight persistent issues in secure coding practices. The applications typically handle user data requiring robust protection mechanisms, though the security posture appears inconsistent with regular vulnerability disclosures. Organizations using LJ Apps should implement additional security controls and monitor for emerging threats given the identified vulnerability patterns.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2024-35630 | WordPress WP TripAdvisor Review Slider plugin <= 12.6 - SQL Injection vulnerability — WP TripAdvisor Review SliderCWE-89 | 7.6 | High | 2024-06-03 |
| CVE-2023-51685 | WordPress WP Review Slider Plugin <= 12.7 is vulnerable to Cross Site Scripting (XSS) — WP Review SliderCWE-79 | 5.9 | Medium | 2024-02-01 |
| CVE-2023-23890 | WordPress WP Airbnb Review Slider Plugin <= 3.2 is vulnerable to Cross Site Request Forgery (CSRF) — WP Airbnb Review SliderCWE-352 | 7.1 | High | 2023-05-20 |
This page lists every published CVE security advisory associated with LJ Apps. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.