WordPress security by component
WP Lead Plus X
Plugin description
WP Lead Plus X is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Oct 16, 2024; the highest CVE/CNA score is 8.3.
Plugin slug:
free-sales-funnel-squeeze-pages-landing-page-builder-templates-makeLatest vulnerability
CVE-2020-36839: WP Lead Plus X: Cross-site request forgery
WP Lead Plus X is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
| Safe version |
|
||
|---|---|---|---|
| Oct 16, 2024 |
CVE-2020-36839
WP Lead Plus X: Cross-site request forgery
WP Lead Plus X is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
|
See mitigation notes |
CVE8.3
NVDPending
|