Skip to content
OpenAdvisories

Product · Smackcoders

Lead Form Data Collection to CRM

3 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.3

    Lead Form Data Collection to CRM <= 3.1 - Missing Authorization to Authenticated (Subscriber+) Many Actions

    The Lead Form Data Collection to CRM plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several functions in the ~/includes/LB_admin_ajax.php file in all versions up to, and including, 3.1. This makes it possible fo…