Skip to content
OpenAdvisories

Vendor

varunvairavanlc

3 known vulnerabilities.

Products

LeadConnector 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-25441

    WordPress LeadConnector plugin <= 3.0.21 - Broken Access Control vulnerability

    Missing Authorization vulnerability in varunvairavanlc LeadConnector leadconnector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LeadConnector: from n/a through <= 3.0.21.

    varunvairavanlc LeadConnector
  • Medium 6.5
    CVE-2024-1371

    LeadConnector <= 1.7 - Missing Authorization to Unauthenticated Arbitrary Post Deletion

    The LeadConnector plugin for WordPress is vulnerable to unauthorized modification & loss of data due to a missing capability check on the lc_public_api_proxy() function in all versions up to, and including, 1.7. This makes it possible for unauthenticated atta…

    varunvairavanlc LeadConnector Web / CMS