WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
leadconnector
Published
2026-01-23
Title
LeadConnector < 3.0.22 - Missing Authorization
Slug
leader
Published
2024-12-14
Title
Leader <= 2.6.1 - Missing Authorization
Slug
leaderboard-lite
Published
2024-12-12
Title
LeaderBoard Plugin <= 1.2.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
leadfox
Published
2025-03-31
Title
Leadfox for WordPress < 2.2.0 - Stored XSS via CSRF
Slug
leadin
Published
2022-04-11
Title
HubSpot < 8.8.15 - Contributor+ Blind SSRF
Slug
leadin
Published
2024-08-29
Title
HubSpot – CRM, Email Marketing, Live Chat, Forms & Analytics < 11.1.34 - Authenticated (Contributor+) Stored Cross-Site Scripting via HubSpot Meeting Widget
Slug
leadin
Published
2026-04-23
Title
HubSpot All-In-One Marketing - Forms, Popups, Live Chat < 11.3.33 - Missing Authorization to Authenticated (Contributor+) Installed Plugin Disclosure
Slug
leadinfo
Published
2024-04-11
Title
Leadinfo < 1.1 - Settings Update via CSRF
Slug
leadinfo
Published
2025-05-25
Title
Leadinfo < 2.1 - Missing Authorization to Unauthenticated Settings Change
Slug
leadlovers-forms
Published
2026-02-16
Title
leadlovers forms <= 1.0.2 - Missing Authorization
Slug
leadpages
Published
2026-01-27
Title
Leadpages < 1.1.4 - Missing Authorization
Slug
leadquizzes
Published
2025-04-01
Title
LeadQuizzes <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
leadrebel
Published
2026-02-18
Title
Leadrebel <= 1.0.2 - Missing Authorization
Slug
leads
Published
2015-03-31
Title
WordPress Leads 1.6.1-1.6.2 - Stored XSS
Slug
leads-5050-visitor-insights
Published
2021-05-07
Title
Leads-5050 Visitor Insights < 1.0.4 - Unauthenticated License Change
Slug
leads-5050-visitor-insights
Published
2021-05-07
Title
Leads-5050 Visitor Insights < 1.1.0 - Unauthorised License Change
Slug
leads-crm
Published
2024-12-17
Title
Leads CRM <= 2.0.13 - Reflected Cross-Site Scripting
Slug
leads-for-amo-crm
Published
2025-09-10
Title
The integration of the AMO.CRM <= 1.0.1 - Cross-Site Request Forgery
Slug
leadsquared-suite
Published
2023-10-03
Title
LeadSquared Suite <= 0.7.4 - CSRF
Slug
leadsquared-suite
Published
2023-10-13
Title
LeadSquared Suite <= 0.7.4 - Admin+ Stored XSS
Slug
leadster-marketing-conversacional
Published
2023-09-04
Title
Leadster < 1.1.3 - Settings Update via CSRF
Slug
leadster-marketing-conversacional
Published
2023-11-16
Title
Leadster < 1.1.3 - Cross-Site Request Forgery via leadster_script_code_action
Slug
leaflet
Published
2012-05-15
Title
Leaflet <= 0.0.1 - Cross Site Scripting
Slug
leaflet-map
Published
2021-07-01
Title
Leaflet Map < 3.0.0 - Contributor+ Stored XSS
Slug
leaflet-map
Published
2021-07-01
Title
Leaflet Map < 3.0.0 - Arbitrary Settings Update via CSRF Leading to Stored XSS