Aller au contenu
5.3 Moyenne

CVE-2026-1890 The LeadConnector WordPress plugin before 3.0.22 does not have authorization in a REST route, allowing unauthenticated…

Description

The LeadConnector WordPress plugin before 3.0.22 does not have authorization in a REST route, allowing unauthenticated users to call it and overwrite existing data

Produits et versions touchés

Produit Versions touchées Corrigé en
LeadConnector 3.0 premières → < 3.0.22 3.0.22
Suivre cette CVE