CVE-2026-4375 — DoLeads Integrator <= 1.2.2 & wp2epub <= 0.65 - Unauthenticated RCE

CVE-2026-4375

DoLeads Integrator <= 1.2.2 & wp2epub <= 0.65 - Unauthenticated RCE PUBLISHED

Description (CNA)

The DoLeads Integrator WordPress plugin through 0.65, wp2epub WordPress plugin through 0.65 have been seen to be used to achieve RCE, once they are added adding to a blog, for example using a vulnerability where unclosed extensions from wordpress.org can be installed by unauthorized users.

Affected (CNA)

Vendor / product	Versions
Unknown / DoLeads Integrator	affected 0 through 0.65
Unknown / wp2epub	affected 0 through 0.65

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/dd043e6c-e6c6-4c8d-aab0-5265d28f5cf6/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.