WordPress Leads

WordPress Leads has one disclosed vulnerability in the WordSec catalog, all reported in 2015; it is fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.

The most common weakness is Missing Authorization, behind 1 of the records (100%).

The one issue recorded for WordPress Leads has a vendor fix available, so running the current release closes it.

All of these findings were reported by James Hooker.

Strategic Overview

Avg CVSSMedium

5.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all WordPress Leads vulnerabilities before they are exploited.

Highest severity on recordCVSS 5.3

WordPress Leads < 1.6.3 - Authorization Bypass

Read the full analysis

Vulnerability Records

1 records


2015-03-31 00:00	WordPress Leads < 1.6.3 - Authorization Bypass WordPress Leads < 1.6.3	`N/A`	5.3 Medium	James Hooker	Yes

Showing 1–1 of 1 reports