WordSec
WordSec

LeadConnector

Explore LeadConnector vulnerabilities across all versions. Currently tracking 4 known vulnerabilities, including severity, impact, and patch status.

01234567891008.12.2020Today29.04.20246.5LeadConnector <= 1.7 - Missing Authorization to Unauthenticated Arbitrary Post Deletion CVSS 6.5 · 29.04.202427.03.20256.4LeadConnector <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 27.03.202523.01.20265.3LeadConnector <= 3.0.21 - Missing Authorization CVSS 5.3 · 23.01.202630.03.20265.3LeadConnector < 3.0.22 - Missing Authorization CVSS 5.3 · 30.03.2026

Strategic Overview

Avg CVSSMedium
5.9/ 10
Patch Coverage100%
Open

0

Fixed

4

Get automatic notifications for all LeadConnector vulnerabilities before they are exploited.

Vulnerability Records

4 records
Showing 1–4 of 4 reports
LeadConnector banner
Latestv4.0.3

LeadConnector

LeadConnector

Author

LeadConnector

2.3(11)
46/100
Last Updated
2026-07-02 (27d ago)
Active Installs
20,000+
Downloads
812,040
Requires WP
6.2+
Requires PHP
7.4+
Tested up to
WP 7.0.2
Created
2020-12-08 (6y ago)

Turn your WordPress site into a LeadConnector-powered conversion engine. LeadConnector connects WordPress with your LeadConnector CRM so your site can capture leads, book appointments, publish funnels, display reviews, and personalize content from one connected admin experience. Key Features Lead capture tools: Add chat widgets, forms, surveys, quizzes, calendars, phone pools, and reviews widgets. Funnel publishing: Import LeadConnector funnel steps as WordPress pages using iframe, redirect, or native HTML display. CRM personalization: Sync LeadConnector custom values into WordPress content. Email and SEO: Send WordPress email through LeadConnector SMTP and manage page metadata. AI and cache tools: Use supported AI Pages workflows and purge Rocket.net cache when configured.

View on WordPress.org

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C