Vulnerability in Leadconnector

CVE-2026-1890

The LeadConnector WordPress plugin before 3.0.22 does not have authorization in a REST route, allowing unauthenticated users to call it and overwrite existing data

EPSS: 0.000 (7.6th percentile) — read the EPSS interpretation.

Affected products

Unknown Leadconnector — versions 0

References

wpscan.com/vulnerability/9b88be70-b5cc-4a3f-a871-64d61cb02076/ (exploit, vdb-entry, technical-description)