medium5.3
CVE-2025-12696
The HelloLeads CRM Form Shortcode WordPress plugin through 1.0 does not have authorisation and CSRF check when resetting its settings, allowing unauthenticated…
Impact
The HelloLeads CRM Form Shortcode WordPress plugin through 1.0 does not have authorisation and CSRF check when resetting its settings, allowing unauthenticated users to reset them
Affected products
| Product | Affected versions |
|---|---|
| HelloLeads CRM Form Shortcode WordPress Plugin | through 1.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.