Contractor Contact Form Website to Workflow Tool
Contractor Contact Form Website to Workflow Tool has one disclosed vulnerability in the WordSec catalog, all reported in 2023; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Contractor Contact Form Website to Workflow Tool has a vendor fix available, so running the current release closes it.
All of these findings were reported by SeungYongLee. Contractor Contact Form Website to Workflow Tool is installed on roughly 50 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.
CVE-2023-44245Contractor Contact Form Website to Workflow Tool <= 4.0.0 - Reflected Cross-Site Scripting
Read the full analysisVulnerability Records

Contractor Contact Form Website to Workflow Tool
Author
Leap LLC.
This useful plugin is a website to workflow tool that allows contractors to drive leads directly from their own website form inquiries directly into their Leap workcenters. Leap is a Cloud based Business Management Platform for Home Improvement Contractors. With this useful plugin, you can drive customers directly from your website into your Leap workflow stages and begin to populate both customer and job related leads and prospects for immediate and mistake free follow-up. This is an automated Customer Relationship Management tool which will save you time and minimize mistakes. For more information about Leap, please visit our website. Dedicated Support We have an entire team of dedicated ready to help you. Ask your questions in the support forum, or contact us directly. Service Customer Management Service through the plugin for Leap.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C