📄 WordPress LeadConnector 1.7 Unauthenticated Arbitrary Post Deletion

WordPress LeadConnector plugin version 1.7 contains an unauthenticated arbitrary post deletion vulnerability. A remote attacker can delete arbitrary WordPress posts without authorization. This proof of concept exploit demonstrates the vulnerable request flow against the affected plugin...

CVE-2024-34378

Missing Authorization vulnerability in LeadConnector.This issue affects LeadConnector: from n/a through 1.7...

CVE-2024-34378

Missing Authorization vulnerability in LeadConnector.This issue affects LeadConnector: from n/a through 1.7...

CVE-2024-34378

LeadConnector WordPress plugin versions