Lucene search
+L

9 matches found

CNVD
CNVD
•added 2025/12/22 12:00 a.m.•16 views

WordPress HelloLeads CRM Form Shortcode plugin missing authorization vulnerability

WordPress HelloLeads CRM Form Shortcode plugin is a WordPress plugin with integrated Customer Relationship Management CRM functionality that allows users to embed CRM forms and marketing tools on their websites through shortcodes. A lack of authorization vulnerability exists in the WordPress...

5.3CVSS6.5AI score0.00136EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/12/16 12:49 p.m.•14 views

WordPress HelloLeads CRM Form Shortcode plugin <= 1.0 - Unauthenticated Settings Reset vulnerability

Unauthenticated Settings Reset vulnerability discovered by Khaled Alenazi Nxploited in WordPress Plugin HelloLeads CRM Form Shortcode versions = 1.0...

5.3CVSS6.7AI score0.00136EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
•added 2025/12/15 6:12 a.m.•28 views

CVE-2025-12696

The HelloLeads CRM Form Shortcode WordPress plugin through 1.0 does not have authorisation and CSRF check when resetting its settings, allowing unauthenticated users to reset them...

5.3CVSS6.9AI score0.00136EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/14 6:15 a.m.•13 views

CVE-2025-12696

The HelloLeads CRM Form Shortcode WordPress plugin through 1.0 does not have authorisation and CSRF check when resetting its settings, allowing unauthenticated users to reset them...

5.3CVSS0.00136EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/14 6:00 a.m.•46 views

CVE-2025-12696 HelloLeads CRM Form Shortcode <= 1.0 - Unauthenticated Settings Reset

The HelloLeads CRM Form Shortcode WordPress plugin through 1.0 does not have authorisation and CSRF check when resetting its settings, allowing unauthenticated users to reset them...

0.00136EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/14 6:00 a.m.•39 views

CVE-2025-12696

The HelloLeads CRM Form Shortcode WordPress plugin (versions ≤ 1.0 ) is vulnerable to an unauthenticated settings reset due to a lack of proper authorization and CSRF checks . This flaw allows unauthenticated users to reset the plugin's settings. While the impact on confidentiality and availabili...

5.3CVSS6.5AI score0.00136EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/14 12:00 a.m.•1 views

CVE-2025-12696: Undefined Security Weakness

The HelloLeads CRM Form Shortcode WordPress plugin through 1.0 does not have authorisation and CSRF check when resetting its settings, allowing unauthenticated users to reset them...

5.3CVSS5.7AI score0.00136EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/14 12:00 a.m.•22 views

PT-2025-51149

The HelloLeads CRM Form Shortcode WordPress plugin through 1.0 does not have authorisation and CSRF check when resetting its settings, allowing unauthenticated users to reset them...

6.9AI score0.00136EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/12/14 12:00 a.m.•14 views

WordPress plugin HelloLeads CRM Form Shortcode 安全漏洞

WordPress HelloLeads CRM Form Shortcode plugin is a WordPress plugin with integrated Customer Relationship Management CRM functionality that allows users to embed CRM forms and marketing tools on their websites through shortcodes. A lack of authorization vulnerability exists in the WordPress...

5.3CVSS6.7AI score0.00136EPSS
SaveExploits0References2
Rows per page
Query Builder