TI-2026-39625 CVE-2026-54822 · GHSA-xwxh-84mx-hgrr
WordPress SALESmanago & Leadoo plugin <= 3.11.2 - SQL Injection vulnerability
Priority LOW 37
Subscriber SQL Injection in SALESmanago & Leadoo <= 3.11.2 versions.
SALESmanago
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
SALESmanago records in CISA KEVNo SALESmanago vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records
TI-2023-04549 CVE-2023-4939 · GHSA-2mxq-q8p2-g2c8
SALESmanago <= 3.2.4 - Log Injection via Weak Authentication Token
Priority LOW 31
The SALESmanago plugin for WordPress is vulnerable to Log Injection in versions up to, and including, 3.2.4.
TI-2025-42092 CVE-2025-68571 · GHSA-2wpw-x29g-2vrh
WordPress SALESmanago plugin <= 3.9.0 - Broken Access Control vulnerability
Priority LOW 30
Missing Authorization vulnerability in SALESmanago SALESmanago & Leadoo salesmanago allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SALESmanago & Leadoo: from n/a through <= 3.9…
TI-2025-35823 CVE-2025-57971 · GHSA-3qvm-628r-4hr4
WordPress SALESmanago Plugin <= 3.8.1 - Broken Access Control Vulnerability
Priority LOW 30
Missing Authorization vulnerability in SALESmanago SALESmanago & Leadoo salesmanago allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SALESmanago & Leadoo: from n/a through <= 3.8…
TI-2025-35822 CVE-2025-57970 · GHSA-hmm9-6v9g-cwx8
WordPress SALESmanago Plugin <= 3.8.1 - Cross Site Request Forgery (CSRF) Vulnerability
Priority LOW 19
Cross-Site Request Forgery (CSRF) vulnerability in SALESmanago SALESmanago & Leadoo salesmanago allows Cross Site Request Forgery.This issue affects SALESmanago & Leadoo: from n/a through <= 3.8.1.