CVE-2026-1890

The LeadConnector WordPress plugin (versions prior to 3.0.22 ) is vulnerable to a broken access control flaw due to missing authorization in a REST route. This vulnerability allows unauthenticated attackers to remotely call the route and overwrite existing data , potentially leading to data tampe...