Read the docs

smackcoders

Records49All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high25CVSS 7.0–8.9

Exploited now

smackcoders records in CISA KEV

No smackcoders vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Import All Pages, Post Types, Products, Orders, And Users As Xml & Csv 7 records HIGH Wp Ultimate Csv Importer 4 records MEDIUM Export All Posts, Products, Orders, Refunds & Users 3 records LOW Echo Sign 2 records LOW Sendgrid 2 records MEDIUM Ultimate Exporter 2 records MEDIUM Wp Ultimate Email Marketer Plugin 2 records LOW Lead Form Data Collection To Crm 1 record LOW

Records

1 record in Lead Form Data Collection To Crm · all components

TI-2025-05131 CVE-2025-5692 · GHSA-fqjp-v5r7-6qw9

Lead Form Data Collection to CRM <= 3.1 - Missing Authorization to Authenticated (Subscriber+) Many Actions

Priority LOW 30

The Lead Form Data Collection to CRM plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several functions in the ~/includes/LB_admin_ajax.php file in all versions up to, and in…

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00251 Published 2025-07-02 No fix listed CWE-862
Open these records in search →