TI-2026-56137 CVE-2026-81298 · GHSA-2g3w-32rg-w3c9
WordPress LeadConnector plugin <= 4.0.5 - Cross Site Scripting (XSS) vulnerability
Priority LOW 31
Unauthenticated Cross Site Scripting (XSS) in LeadConnector <= 4.0.5 versions.
Vulnerabilities
3 records
TI-2026-20555 CVE-2026-25441 · GHSA-wh7q-jq87-h3wq
WordPress LeadConnector plugin <= 3.0.21 - Broken Access Control vulnerability
Priority LOW 30
Missing Authorization vulnerability in varunvairavanlc LeadConnector leadconnector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LeadConnector: from n/a through <= 3.0.21.
TI-2024-01279 CVE-2024-1371 · GHSA-8c6j-52q3-w3c5
LeadConnector <= 1.7 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
Priority LOW 38
The LeadConnector plugin for WordPress is vulnerable to unauthorized modification & loss of data due to a missing capability check on the lc_public_api_proxy() function in all versions up to, and including, 1.7.