Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

WP2LEADS — Vulnerabilities & Security Advisories 8

All 8 CVE vulnerabilities found in WP2LEADS, with AI-generated Chinese analysis, references, and POCs.

Vendor: Saleswonder Team: Tobias

CVE ID Title CVSS Severity Published
CVE-2026-25434 WordPress WP2LEADS plugin <= 3.5.7 - SQL Injection vulnerability CWE-89 8.5 High 2026-10-06
CVE-2026-25433 WordPress WP2LEADS plugin <= 3.5.7 - Broken Access Control vulnerability CWE-862 7.1 High 2026-10-06
CVE-2025-49316 WordPress WP2LEADS plugin <= 3.5.0 - Reflected Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2025-06-17
CVE-2025-32922 WordPress WP2LEADS plugin <= 3.5.0 - Cross Site Request Forgery (CSRF) vulnerability CWE-352 7.1 High 2025-05-15
CVE-2025-30827 WordPress WP2LEADS plugin <= 3.4.5 - Reflected Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2025-04-01
CVE-2025-24565 WordPress WP2LEADS plugin <= 3.3.3 - Reflected Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2025-02-14
CVE-2024-56065 WordPress WP2LEADS Plugin <= 3.4.2 - Reflected Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2025-01-13
CVE-2024-31375 WordPress WP2LEADS plugin <= 3.2.7 - Broken Access Control vulnerability CWE-862 5.4 Medium 2024-04-08

All 8 known CVE vulnerabilities affecting WP2LEADS with full Chinese analysis, references, and POCs where available.