Leadrebel

Leadrebel has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it remains unpatched as of August 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.

The most common weakness is Missing Authorization, behind 1 of the records (100%).

The one issue recorded for Leadrebel has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2026.

All of these findings were reported by Nabil Irawan. Leadrebel is installed on roughly 60 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.0.14.

Strategic Overview

Avg CVSSMedium

5.3/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all Leadrebel vulnerabilities before they are exploited.

Most severe open issueCVSS 5.3CVE-2026-39664

Leadrebel <= 1.0.2 - Missing Authorization

Read the full analysis

Vulnerability Records

1 records


2026-02-18 00:00	Leadrebel <= 1.0.2 - Missing Authorization Leadrebel <= 1.0.2	`CVE-2026-39664`	5.3 Medium	Nabil Irawan	No

Showing 1–1 of 1 reports

Plugin Profile

Latestv1.0.2

Leadrebel

Author

leadrebel

0.0(0)

0/100

Last Updated

2023-08-03 (3y ago)

Active Installs

60+

Downloads

1,478

Requires WP

Requires PHP

7.3+

Tested up to

WP 6.0.14

Created

2022-11-08 (4y ago)

LeadRebel is a software for B2B lead generation. Out plugin shows you which companies visited your website, company and contact information of the contact person. More traffic, more “warm” leads, more sales success! See who visits your website and generate more B2B leads. How it works: install the plugin, sign up or login (if you have an account) using your plugin. The tracking code will be automatically added to your website.

View on WordPress.org