Lucene search
K

8 matches found

CNVD
CNVD
added 2025/12/22 12:0 a.m.1 views

WordPress HelloLeads CRM Form Shortcode plugin missing authorization vulnerability

WordPress HelloLeads CRM Form Shortcode plugin is a WordPress plugin with integrated Customer Relationship Management CRM functionality that allows users to embed CRM forms and marketing tools on their websites through shortcodes. A lack of authorization vulnerability exists in the WordPress...

5.3CVSS6.5AI score0.00026EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/12/16 12:49 p.m.3 views

WordPress HelloLeads CRM Form Shortcode plugin <= 1.0 - Unauthenticated Settings Reset vulnerability

Unauthenticated Settings Reset vulnerability discovered by Khaled Alenazi Nxploited in WordPress Plugin HelloLeads CRM Form Shortcode versions = 1.0...

5.3CVSS6.7AI score0.00026EPSS
Exploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/12/15 6:12 a.m.2 views

CVE-2025-12696

The HelloLeads CRM Form Shortcode WordPress plugin through 1.0 does not have authorisation and CSRF check when resetting its settings, allowing unauthenticated users to reset them...

5.3CVSS6.9AI score0.00026EPSS
Exploits0References1
NVD
NVD
added 2025/12/14 6:15 a.m.2 views

CVE-2025-12696

The HelloLeads CRM Form Shortcode WordPress plugin through 1.0 does not have authorisation and CSRF check when resetting its settings, allowing unauthenticated users to reset them...

5.3CVSS0.00026EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/14 6:0 a.m.15 views

CVE-2025-12696 HelloLeads CRM Form Shortcode <= 1.0 - Unauthenticated Settings Reset

The HelloLeads CRM Form Shortcode WordPress plugin through 1.0 does not have authorisation and CSRF check when resetting its settings, allowing unauthenticated users to reset them...

0.00026EPSS
Exploits0References1
CVE
CVE
added 2025/12/14 6:0 a.m.10 views

CVE-2025-12696

CVE-2025-12696 affects the WordPress HelloLeads CRM Form Shortcode plugin (versions

5.3CVSS6.5AI score0.00026EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/12/14 12:0 a.m.2 views

PT-2025-51149

The HelloLeads CRM Form Shortcode WordPress plugin through 1.0 does not have authorisation and CSRF check when resetting its settings, allowing unauthenticated users to reset them...

6.9AI score0.00026EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/12/14 12:0 a.m.1 views

WordPress plugin HelloLeads CRM Form Shortcode 安全漏洞

WordPress HelloLeads CRM Form Shortcode plugin is a WordPress plugin with integrated Customer Relationship Management CRM functionality that allows users to embed CRM forms and marketing tools on their websites through shortcodes. A lack of authorization vulnerability exists in the WordPress...

5.3CVSS6.7AI score0.00026EPSS
Exploits0References2
Rows per page
Query Builder