Skip to content
OpenAdvisories

Vendor

dipesh_patel

1 known vulnerabilities.

Products

Web to SugarCRM Lead 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2025-13361

    Web to SugarCRM Lead <= 1.0.0 - Cross-Site Request Forgery to Custom Field Deletion

    The Web to SugarCRM Lead plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.0. This is due to missing nonce validation on the custom field deletion functionality. This makes it possible for unauthenticat…

    dipesh_patel Web to SugarCRM Lead Web / CMS