CVE-2025-31424 — WordPress WP Lead Capturing Pages plugin < 2.6 - SQL Injection vulnerability

CVE-2025-31424

WordPress WP Lead Capturing Pages plugin < 2.6 - SQL Injection vulnerability PUBLISHED

Description (CNA)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in kamleshyadav WP Lead Capturing Pages leadcapture allows Blind SQL Injection.This issue affects WP Lead Capturing Pages: from n/a through < 2.6.

Affected (CNA)

Vendor / product	Versions
kamleshyadav / WP Lead Capturing Pages	affected 0 through 2.6

CWE

CWE-89

References

https://patchstack.com/database/Wordpress/Plugin/leadcapture/vulnerability/wordpress-wp-lead-capturing-pages-plugin-2-3-sql-injection-vulnerability?_s_id=cve

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.