Webcake – Landing Page Builder

Webcake – Landing Page Builder has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.

The most common weakness is Missing Authorization, behind 1 of the records (100%).

The one issue recorded for Webcake – Landing Page Builder has a vendor fix available, so running the current release closes it.

All of these findings were reported by Legion Hunter. Webcake – Landing Page Builder is installed on roughly 300 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.

Strategic Overview

Avg CVSSMedium

4.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Webcake – Landing Page Builder vulnerabilities before they are exploited.

Highest severity on recordCVSS 4.3CVE-2025-12165

Webcake – Landing Page Builder <= 1.1 - Missing Authorization to Authenticated (Subscriber+) Settings Update

Read the full analysis

Vulnerability Records

1 records


2025-12-04 16:38	Webcake – Landing Page Builder <= 1.1 - Missing Authorization to Authenticated (Subscriber+) Settings Update Webcake <= 1.1	`CVE-2025-12165`	4.3 Medium	Legion Hunter	Yes

Showing 1–1 of 1 reports

Plugin Profile

Latestv1.2

Webcake – Landing Page Builder

Author

huyme

5.0(1)

100/100

Last Updated

2025-12-04 (9mo ago)

Active Installs

300+

Downloads

3,427

Requires WP

3.4+

Requires PHP

5.6+

Tested up to

WP 6.7.7

Created

2022-03-22 (5y ago)

Webcake Page Builder for WordPress. Use full feature from Webcake service. Pancake Ecosystem for eCommerce Pancake: https://pages.fm Webcake: https://webcake.io Hashtag: #Webcake #Landing Page #Pancake

View on WordPress.org