WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
lead-form-builder
Published
2021-12-22
Title
Contact Form & Lead Form Elementor Builder < 1.6.8 - Subscriber+ Arbitrary Lead Deletion
Slug
lead-form-builder
Published
2024-04-11
Title
Responsive Contact Form Builder & Lead Generation Plugin < 1.9.0 - Missing Authorization
Slug
lead-form-builder
Published
2024-04-11
Title
Responsive Contact Form Builder & Lead Generation Plugin < 1.9.0 - Cross-Site Request Forgery
Slug
lead-form-builder
Published
2024-04-12
Title
Responsive Contact Form Builder & Lead Generation Plugin < 1.9.8 - Admin+ Stored XSS
Slug
lead-form-builder
Published
2024-05-21
Title
Responsive Contact Form Builder & Lead Generation Plugin < 1.9.2 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
Slug
lead-form-builder
Published
2024-10-23
Title
Lead Form Builder < 1.9.8 - Admin+ Stored XSS
Slug
lead-form-builder
Published
2026-01-20
Title
Contact Form & Lead Form Elementor Builder < 2.0.2 - Authenticated (Subscriber+) Information Exposure
Slug
lead-form-builder
Published
2026-03-10
Title
Responsive Contact Form Builder & Lead Generation Plugin < 2.0.2 - Unauthenticated Stored Cross-Site Scripting
Slug
lead-form-builder
Published
2026-03-23
Title
Lead Form Builder & Contact Form < 2.0.2 - Unauthenticated Stored Cross-Site Scripting
Slug
leadbi
Published
2025-07-18
Title
LeadBI Plugin for WordPress <= 1.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
leadbi
Published
2026-01-23
Title
LeadBI Plugin for WordPress <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'form_id' Shortcode Attribute
Slug
leadboxer
Published
2024-11-18
Title
LeadBoxer < 1.4 - Reflected XSS
Slug
leadcapture
Published
2025-06-03
Title
WP Lead Capturing Pages < 2.6 - Unauthenticated SQL Injection
Slug
leadcapture
Published
2025-08-06
Title
WP Lead Capturing Pages < 2.6 - Missing Authorization to Arbitrary Content Deletion
Slug
leadconnector
Published
2024-04-29
Title
LeadConnector < 1.8 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
Slug
leadconnector
Published
2025-03-27
Title
LeadConnector < 3.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
leadconnector
Published
2026-03-05
Title
LeadConnector < 3.0.22 - Unauthenticated Rest Call
Slug
leader
Published
2024-12-14
Title
Leader <= 2.6.1 - Missing Authorization
Slug
leaderboard-lite
Published
2024-12-12
Title
LeaderBoard Plugin <= 1.2.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
leadfox
Published
2025-03-31
Title
Leadfox for WordPress < 2.2.0 - Stored XSS via CSRF
Slug
leadin
Published
2022-04-11
Title
HubSpot < 8.8.15 - Contributor+ Blind SSRF
Slug
leadin
Published
2024-08-29
Title
HubSpot – CRM, Email Marketing, Live Chat, Forms & Analytics < 11.1.34 - Authenticated (Contributor+) Stored Cross-Site Scripting via HubSpot Meeting Widget
Slug
leadinfo
Published
2024-04-11
Title
Leadinfo < 1.1 - Settings Update via CSRF
Slug
leadinfo
Published
2025-05-25
Title
Leadinfo < 2.1 - Missing Authorization to Unauthenticated Settings Change
Slug
leadlovers-forms
Published
2026-02-16
Title
leadlovers forms <= 1.0.2 - Missing Authorization