medium5.3
CVE-2026-1890
The LeadConnector WordPress plugin before 3.0.22 does not have authorization in a REST route, allowing unauthenticated users to call it and overwrite existing …
Impact
The LeadConnector WordPress plugin before 3.0.22 does not have authorization in a REST route, allowing unauthenticated users to call it and overwrite existing data
Affected products
| Product | Affected versions |
|---|---|
| LeadConnector WordPress Plugin | before 3.0.22 |
Versions were read from the advisory text. No structured product data has been published for this record yet.