CVE-2026-1890

LeadConnector < 3.0.22 - Unauthenticated Rest Call PUBLISHED

Description (CNA)

The LeadConnector WordPress plugin before 3.0.22 does not have authorization in a REST route, allowing unauthenticated users to call it and overwrite existing data

Affected (CNA)

Vendor / product	Versions
Unknown / LeadConnector	affected 0 before 3.0.22

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/9b88be70-b5cc-4a3f-a871-64d61cb02076/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.