Skip to content
OpenAdvisories
High · 8.8 CVE-2025-47690 EUVD-2025-28121GHSA-4x22-29pf-hh57

WordPress Lead Form Data Collection to CRM plugin <= 3.1 - Arbitrary Option Update to Privilege Escalation vulnerability

Published May 23, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Smackcoders Product: Lead Form Data Collection to CRM

Description

Missing Authorization vulnerability in Smackcoders Inc., Lead Form Data Collection to CRM wp-leads-builder-any-crm allows Privilege Escalation.This issue affects Lead Form Data Collection to CRM: from n/a through <= 3.1.

Affected products

VendorProductAffectedFixed
Smackcoders Inc., Lead Form Data Collection to CRM ≤ 3.1 —

References