Lenix Leads Collector

Lenix Leads Collector has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 7.2, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Lenix Leads Collector has a vendor fix available, so running the current release closes it.

All of these findings were reported by Webbernaut. Lenix Leads Collector is installed on roughly 10,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.

Strategic Overview

Avg CVSSHigh
7.2/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Lenix Leads Collector vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.2CVE-2025-1039

Lenix Elementor Leads addon <= 1.8.2 - Unauthenticated Stored Cross-Site Scripting via URL Form Field

Read the full analysis

Vulnerability Records

1 records
Lenix Leads Collector banner
Latestv2.0.0

Lenix Leads Collector

yonifre

Author

yonifre

4.4(25)
88/100
Last Updated
2025-06-12 (1y ago)
Active Installs
10,000+
Downloads
187,749
Requires WP
5.0+
Requires PHP
7.0+
Tested up to
WP 6.8.8
Created
2017-09-27 (9y ago)

Lenix Leads Collector is a powerful plugin that stores and manages leads from your Elementor,Cf7,WPForms and more with export to CSV. Key Features: * Automatic capture of all Elementor form submissions * Automatic capture of all Hello Plus form submissions * Automatic capture of all Cf7 form submissions * Automatic capture of all WPForms form submissions * Centralized management interface in WordPress admin panel * Quick and easy export of leads to CSV format * Support for global forms * Multi-language support (including English, Hebrew, French and more) * User-friendly and intuitive interface * Date-based filtering for exports * Secure data handling * Each lead is a post in WordPress, so you can use all the features of WordPress to manage them No need to install any other plugin, just install and use, no configuration needed. The plugin provides a seamless way to track, manage, and export all leads received through your forms, organizing them similarly to WordPress posts for easy access and management. Perfect for Websites and organizations looking to efficiently manage their form submissions and lead data in one central location. Maspik – Spam Protection For improved spam protection, check out our sister plugin Maspik We provide built-in spam protection and filtering. For enhanced spam prevention, we recommend using Maspik – an advanced anti-spam solution specifically designed for WordPress forms. With a 95%+ success rate, Maspik uses smart technology to block spam submissions while ensuring legitimate leads get through. The plugin works instantly with no CAPTCHA required and includes features like smart blacklist system, IP blocking, and phone number validation. Compatible with all major form plugins including Elementor forms, you can set it up in just 2 minutes. Learn more about Maspik

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C