High · 7.5 CVE-2025-31425 EUVD-2025-24743GHSA-qpvq-c729-rr67

WordPress WP Lead Capturing Pages plugin < 2.6 - Arbitrary Content Deletion vulnerability

Published Aug 14, 2025 · Updated May 12, 2026 · Assigned by Patchstack

Vendor: kamleshyadav Product: WP Lead Capturing Pages

Description

Missing Authorization vulnerability in kamleshyadav WP Lead Capturing Pages leadcapture allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Lead Capturing Pages: from n/a through < 2.6.

Affected products

Vendor	Product	Affected	Fixed
kamleshyadav	WP Lead Capturing Pages	≤ 2.6	—

References

https://patchstack.com/database/Wordpress/Plugin/leadcapture/vulnerability/wordpress-wp-lead-capturing-pages-plugin-2-3-arbitrary-content-deletion-vulnerability?_s_id=cve vdb-entry