Beacon Lead Magnets and Lead Capture

Beacon Lead Magnets and Lead Capture has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; all 2 are fixed as of September 2026. Their average CVSS score is 5.2, and the most serious one scores 6.1 out of 10. 2025 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Cross-Site Scripting.

Every one of the 2 issues recorded for Beacon Lead Magnets and Lead Capture has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Beacon Lead Magnets and Lead Capture is installed on roughly 500 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium

5.2/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Beacon Lead Magnets and Lead Capture vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1CVE-2025-24637

Beacon Lead Magnets and Lead Capture <= 1.5.7 - Reflected Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records


2025-05-07 00:00	Beacon Lead Magnets and Lead Capture <= 1.5.8 - Cross-Site Request Forgery Beacon Lead Magnets and Lead Capture <= 1.5.8	`CVE-2025-47596`	4.3 Medium	Nabil Irawan	Yes
2025-01-06 00:00	Beacon Lead Magnets and Lead Capture <= 1.5.7 - Reflected Cross-Site Scripting Beacon Lead Magnets and Lead Capture <= 1.5.7	`CVE-2025-24637`	6.1 Medium	0xd4rk5id3	Yes

Showing 1–2 of 2 reports

Latestv1.5.9

Beacon Lead Magnets and Lead Capture

Author

Syed Balkhi

4.4(28)

88/100

Last Updated

2025-12-16 (9mo ago)

Active Installs

500+

Downloads

64,026

Requires WP

5.3+

Requires PHP

7.4+

Tested up to

WP 6.9.7

Created

2015-08-10 (11y ago)

Beacon helps you to create professional lead magnets, publish those lead magnets on your website and convert more traffic into leads. With the Beacon WordPress plugin you can automatically convert blog posts into your lead magnet format of choice. Lead magnets can help to: Increase conversion rate Reduce cost per lead Improve lead nurturing Note: requires a free account available from www.beacon.by Note: we do not currently support WordPress Multisite or the Thrive Content Builder Plugin Features Convert WordPress posts Convert WordPress pages Search for specific articles Filter by tag Filter by category Beacon Lead Magnet Features Dozens of customisable lead magnet templates Create your own reusable templates Choose from multiple lead magnet formats (eBook, Checklist, Workbook etc) Automatically generated table of contents PDF Download Smart PDF version 3d cover image generation Need help? Checkout out our knowledge base: https://help.beacon.by/

View on WordPress.org