Ni CRM Lead
Ni CRM Lead has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2025; none of them are fixed as of September 2026. Their average CVSS score is 6.3, and the most serious one scores 6.5 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (50%). Other recurring categories include SQL Injection.
None of the 2 issues recorded for Ni CRM Lead have a published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2024.
All of these findings were reported by thiennv. Ni CRM Lead is installed on roughly 10 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.5.10.
CVE-2024-54258Ni CRM Lead <= 1.3.0 - Authenticated (Subscriber+) SQL Injection
Read the full analysisVulnerability Records
Ni CRM Lead
Author
Anzar Ahmed
Ni CRM Lead is a straightforward WordPress plugin designed to streamline lead creation. It efficiently maintains customer or vendor information along with follow-up history. This plugin enables you to easily store customer inquiries for various services and products, enhancing organization and efficiency. Some Features. Fast And Easy Install Add New Customer Add New Inquiry Add Update, Delete Follow Up Add new Follow up Add, Delete, Service, Product and status Feedback We are open to your suggestions and feedback – Thank you for using or trying out one of our plugins. Support email:support@naziinfotech.com
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C