5.3
Moyenne
CVE-2026-1890 The LeadConnector WordPress plugin before 3.0.22 does not have authorization in a REST route, allowing unauthenticated…
Description
The LeadConnector WordPress plugin before 3.0.22 does not have authorization in a REST route, allowing unauthenticated users to call it and overwrite existing data
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| LeadConnector 3.0 | premières → < 3.0.22 | 3.0.22 |