Leadinfo

Leadinfo has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2025; all 2 are fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Missing Authorization.

Every one of the 2 issues recorded for Leadinfo has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Leadinfo is installed on roughly 7,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.

Strategic Overview

Avg CVSSMedium

5.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Leadinfo vulnerabilities before they are exploited.

Highest severity on recordCVSS 5.3CVE-2025-48271

Leadinfo <= 1.1 - Missing Authorization to Unauthenticated Settings Change

Read the full analysis

Vulnerability Records

2 records


2025-05-25 00:00	Leadinfo <= 1.1 - Missing Authorization to Unauthenticated Settings Change Leadinfo <= 1.1	`CVE-2025-48271`	5.3 Medium	Denver Jackson	Yes
2024-04-11 00:00	Leadinfo <= 1.0 - Cross-Site Request Forgery Leadinfo <= 1.0	`CVE-2024-32112`	5.3 Medium	Nguyen Xuan Chien	Yes

Showing 1–2 of 2 reports

Latestv2.1.4

Leadinfo

Author

Really Simple Plugins

4.0(3)

80/100

Last Updated

2025-05-20 (1y ago)

Active Installs

7,000+

Downloads

47,693

Requires WP

3.0.1+

Requires PHP

Tested up to

WP 6.8.8

Created

2018-05-09 (9y ago)

Identify B2B website visitors. Simple and realtime. Leadinfo enables you to see real-time which companies are visiting your website and what pages they’re viewing to increase your sales.

View on WordPress.org