Leadpages

Explore Leadpages vulnerabilities across all versions. Currently tracking 1 known vulnerabilities, including severity, impact, and patch status.

Strategic Overview

Avg CVSSMedium
5.3/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Leadpages vulnerabilities before they are exploited.

Vulnerability Records

1 records
Showing 1–1 of 1 reports
Leadpages banner
Latestv1.2.3
5.0(3)
100/100
Last Updated
2026-07-29 (4h ago)
Active Installs
10,000+
Downloads
12,285
Requires WP
6.0+
Requires PHP
8.0+
Tested up to
WP 7.0.2
Created
2024-04-30 (2y ago)

Leadpages is a complete lead generation platform that allows you to build high-converting landing pages. Easily create your pages in your Leadpages account with the no-code builder, then use the Leadpages plugin to seamlessly publish your assets to your WordPress site. Along with lead management and analytics, Leadpages gives you all the tools you need to turn your website into a conversion machine. Sign up for a Leadpages free trial to get started. Lead-generating landing pages Choose from 250+ conversion-optimized templates, then customize your look with the drag-and-drop builder. No coding or web design experience is required—change colors, add text, and upload images with just a few clicks of your mouse. These pages aren’t just easy to build… they work. In fact, Leadpages landing pages convert 5x better than the industry average. Here are a few more reasons to build your pages with Leadpages: * Get real-time conversion tips as you build. * Enjoy blazingly fast page speeds. * Use AI copywriting and image generation tools to quickly create content. Conversion tools Turning website visitors into customers just got a whole lot easier. Bring attention to your lead magnets, sales, and giveaways with pop-ups and alert bars, and then lock in the conversion with high-converting forms. Have an offer you want to draw attention to? Create a timed or exit intent pop-up to capture users’ attention and ensure they don’t leave your site empty-handed. If you’re looking for something a little less intrusive than an alert bar (a small colored bar that appears at the top of the screen) is another option. You can also create a sense of urgency for your limited-time offers with countdown timers. When visitors are ready to take action, capture their information with a lead gen form. Collect email addresses and automatically deliver lead magnets—or integrate your forms with your email marketing platform for even more options. Finally, when visitors are ready to make a purchase they can do so right from your website. Add checkout forms to any page without having to send visitors to third-party sites. Manage your leads Leadpages doesn’t just help you acquire leads—it also helps you to make the most of your leads once you get them. Do away with clunky spreadsheets. With the Leadpages, you can search, filter, and manage your leads right inside the Leads Library. Need even more lead management tools? Seamlessly integrate your Leadpages account with your favorite CRM platform. Leadpages also notifies you as soon as you get a lead so you can reach out to them while your brand is still top of mind. Track your progress Stay in the know about how your pages are performing. See how many visitors are landing on your pages, track your conversion rates and leads, and make adjustments based on your findings. To maximize your results, use Leadpages’ A/B testing tool. Create multiple versions of your landing page to test different text, image, and CTA button variations. See which version produces the most conversions and keep testing until your page is completely optimized. External services This plugin connects to Leadpages so it can publish and serve your Leadpages content on your WordPress site. It supports two Leadpages platforms: Classic Leadpages and the new Leadpages (“Nova”). You choose which account to connect. No data is sent to Leadpages until you connect an account. Classic Leadpages (leadpages.com / leadpages.io): – When you connect, the plugin runs an OAuth 2.0 sign-in and stores the resulting access and refresh tokens in your WordPress options table. The tokens are never displayed and are erased when you sign out, deactivate, or uninstall the plugin. – When you sync, the plugin requests your landing page list and analytics from the Leadpages content API using your token. – When a visitor loads a connected page, the plugin fetches that page’s published HTML from Leadpages and serves it at your WordPress URL. New Leadpages / Nova (leadpages.com): – When you connect, the plugin runs an OAuth 2.0 (PKCE) sign-in against the new Leadpages authorize and token endpoints and stores the resulting access and refresh tokens in your WordPress options table (never displayed; erased on sign out, deactivate, or uninstall). – When you sync, the plugin requests your published pages from /api/pages, per-page metrics from /api/analytics/pages, and your pop-ups from /api/popups, using your token. – In the plugin’s page list, each new-Leadpages page shows a small preview thumbnail loaded from the public, cached /api/thumbnails/{id} endpoint (a placeholder icon is shown when a page has no thumbnail). – When a visitor loads a connected page, the plugin fetches that page’s HTML from /api/pages/{slug}/raw (a public endpoint for published pages) and serves it at your WordPress URL. The visitor’s cookies and IP are forwarded so per-visitor experiments and personalization work; response cookies are passed back to the visitor. – If you choose to show a pop-up, the plugin adds the public embed script /api/popup/{id}/embed.js to your site. Your use of Leadpages is governed by the Leadpages Terms of Service (https://leadpages.com/legal/terms) and Privacy Policy (https://leadpages.com/legal/privacy).

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C