CVE-2025-12696

The HelloLeads CRM Form Shortcode WordPress plugin (versions ≤ 1.0 ) is vulnerable to an unauthenticated settings reset due to a lack of proper authorization and CSRF checks . This flaw allows unauthenticated users to reset the plugin's settings. While the impact on confidentiality and availabili...