Vendors / varunvairavanlc Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 1
Exploited now varunvairavanlc records in CISA KEV No varunvairavanlc vulnerabilities are listed in CISA KEV.
Priority LOW 38
The LeadConnector plugin for WordPress is vulnerable to unauthorized modification & loss of data due to a missing capability check on the lc_public_api_proxy() function in all versions up to, and including, 1.7.
CVSS 3.1 MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00587 · Published 2024-04-30 · No fix listed CWE-862
Priority LOW 31
Unauthenticated Cross Site Scripting (XSS) in LeadConnector <= 4.0.5 versions.
CVSS 3.1 HIGH 7.1· Network · No auth · User interaction · EPSS 0.00251 · Published 2026-08-31 · No fix listed CWE-79
Priority LOW 30
Missing Authorization vulnerability in varunvairavanlc LeadConnector leadconnector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LeadConnector: from n/a through <= 3.0.21.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00327 · Published 2026-02-19 · No fix listed CWE-862
Open these records in search → All records by CVSS severity
0 1 2 0 0
