← WordPress Vulnerabilities
WordPress security by component

WP Lead Capturing Pages

WP Lead Capturing Pages is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Aug 14, 2025; the highest CVE/CNA score is 9.3.

Plugin slug: leadcapture

CVE-2025-31425: WP Lead Capturing Pages: A security weakness

WP Lead Capturing Pages is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.

PublishedAug 14, 2025
Safe version guidanceSee mitigation notes
Safe version
Aug 14, 2025 CVE-2025-31425
WP Lead Capturing Pages: A security weakness
WP Lead Capturing Pages is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE7.5
NVDPending
Jun 09, 2025 CVE-2025-31424
WP Lead Capturing Pages: SQL injection
WP Lead Capturing Pages is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
See mitigation notes
CVE9.3
NVDPending