PT-2026-3972 · WordPress · Wp Lead Capturing Pages
CVE-2025-49055
·
Publicado
2026-01-22
·
Atualizado
2026-01-25
CVSS v3.1
9.3
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L |
Name of the Vulnerable Software and Affected Versions
kamleshyadav WP Lead Capturing Pages versions through 2.5
Description
The software contains a flaw related to improper handling of special characters within SQL queries, potentially allowing for SQL Injection. This could allow an attacker to manipulate database queries. The vulnerability allows for Blind SQL Injection.
Recommendations
Update kamleshyadav WP Lead Capturing Pages to a version later than 2.5.
Correção
SQL injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Wp Lead Capturing Pages