TI-2026-39625 CVE-2026-54822 · GHSA-xwxh-84mx-hgrr
WordPress SALESmanago & Leadoo plugin <= 3.11.2 - SQL Injection vulnerability
Priority LOW 37
Subscriber SQL Injection in SALESmanago & Leadoo <= 3.11.2 versions.
Vulnerabilities
5 records
TI-2025-42092 CVE-2025-68571 · GHSA-2wpw-x29g-2vrh
WordPress SALESmanago plugin <= 3.9.0 - Broken Access Control vulnerability
Priority LOW 30
Missing Authorization vulnerability in SALESmanago SALESmanago & Leadoo salesmanago allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SALESmanago & Leadoo: from n/a through <= 3.9…
TI-2025-35822 CVE-2025-57970 · GHSA-hmm9-6v9g-cwx8
WordPress SALESmanago Plugin <= 3.8.1 - Cross Site Request Forgery (CSRF) Vulnerability
Priority LOW 19
Cross-Site Request Forgery (CSRF) vulnerability in SALESmanago SALESmanago & Leadoo salesmanago allows Cross Site Request Forgery.This issue affects SALESmanago & Leadoo: from n/a through <= 3.8.1.
TI-2025-35823 CVE-2025-57971 · GHSA-3qvm-628r-4hr4
WordPress SALESmanago Plugin <= 3.8.1 - Broken Access Control Vulnerability
Priority LOW 30
Missing Authorization vulnerability in SALESmanago SALESmanago & Leadoo salesmanago allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SALESmanago & Leadoo: from n/a through <= 3.8…
TI-2023-04549 CVE-2023-4939 · GHSA-2mxq-q8p2-g2c8
SALESmanago <= 3.2.4 - Log Injection via Weak Authentication Token
Priority LOW 31
The SALESmanago plugin for WordPress is vulnerable to Log Injection in versions up to, and including, 3.2.4.