Approved changes feed: RSS · Atom

cpe:2.3:a:kamleshyadav:wp_lead_capturing_pages:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorKamleshyadav (9468a0d3-8e29-564a-9a34-55dcb44bf399)
ProductWp Lead Capturing Pages (d663611c-202c-59ac-ab6b-10bd44dcc69d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-49055 vulnerable 2026-06-08 07:29:12.520703 WordPress WP Lead Capturing Pages plugin <= 2.5 - SQL Injection vulnerability
CRITICAL (9.3)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in kamleshyadav WP Lead Capturing Pages wp-lead-capture allows Blind SQL Injection.This issue affects WP Lead Capturing Pages: from n/a through <= 2.5.
Published: 2026-01-22T16:51:42.502Z
Updated: 2026-04-28T16:12:58.147Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49050 vulnerable 2026-06-08 07:29:12.515847 WordPress WP Lead Capturing Pages plugin <= 2.5 - SQL Injection vulnerability
HIGH (8.5)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in kamleshyadav WP Lead Capturing Pages wp-lead-capture allows Blind SQL Injection.This issue affects WP Lead Capturing Pages: from n/a through <= 2.5.
Published: 2026-01-22T16:51:42.307Z
Updated: 2026-04-28T16:12:57.947Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-31425 vulnerable 2026-06-08 07:17:02.990109 WordPress WP Lead Capturing Pages plugin < 2.6 - Arbitrary Content Deletion vulnerability
HIGH (7.5)
Missing Authorization vulnerability in kamleshyadav WP Lead Capturing Pages leadcapture allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Lead Capturing Pages: from n/a through < 2.6.
Published: 2025-08-14T10:34:27.684Z
Updated: 2026-05-12T00:33:29.646Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-31424 vulnerable 2026-06-08 07:17:02.989774 WordPress WP Lead Capturing Pages plugin < 2.6 - SQL Injection vulnerability
CRITICAL (9.3)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in kamleshyadav WP Lead Capturing Pages leadcapture allows Blind SQL Injection.This issue affects WP Lead Capturing Pages: from n/a through < 2.6.
Published: 2025-06-09T15:56:38.948Z
Updated: 2026-05-12T00:23:11.081Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.