Sprout Clients – CRM and Lead Management
Sprout Clients – CRM and Lead Management has 6 disclosed vulnerabilities in the WordSec catalog, reported between 2019 and 2026; all 6 are fixed as of September 2026. Their average CVSS score is 6.8, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 2 high. 2026 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Scripting, behind 5 of the records (83%). Other recurring categories include Missing Authorization.
Every one of the 6 issues recorded for Sprout Clients – CRM and Lead Management has a vendor fix available, so running the current release closes all known holes.
5 independent researchers contributed these findings, one record each. Sprout Clients – CRM and Lead Management is installed on roughly 40 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
Freemius SDK <= 2.2.3 - Missing Authorization to Arbitrary Options Update
Read the full analysisVulnerability Records

Sprout Clients – CRM and Lead Management
Author
BoldGrid
Sprout Apps Family Sprout Clients is a standalone Lead Management plugin and is complimentary to Sprout Invoices, another free business centric plugin from Sprout Apps. Sprout Clients – Premium WordPress CRM & Lead Management Plugin The future of Sprout Clients relies on happy customers supporting Sprout Invoices by purchasing upgraded versions. If you like this free version of Sprout Clients please consider purchasing an upgrade. Create Leads, Sprout Clients Properly leveraging your contact lists isn’t sending out a single email to the entire list asking for work — instead you need to build business relationships. Managing contacts and customers shouldn’t be a burden, and Sprout Clients wants to make the that entire process easier and less time consuming. Scheduled Messaging Write to your leads/clients now and have them delivered later. Meet someone new and want to follow-up in a couple weeks, now there’s no forgetting. Version 2.0 Engagements Sometimes you meet your clients or create specific engagements. Sprout Clients wants to tie those engagements to your clients for reference and automation. Version 2.0 Relationship Building The premise of “managing” your contacts is to build relationships. Sprout Clients wants to make the process of building those relationships easier and less time consuming. Sprout App Integrations with Sprout Invoices Regardless of this being a standalone app the integration compliments Sprout Invoices very well. Future integrations with Help Scout Desk, and more are planned. Built the WordPress Way Plenty of filters and actions allow you to hook into Sprout Clients and alter whatever you’d like or build some awesome features beyond what we have planed for the future. Awesome Support The results of our happiness report show people love our support, check it out on the Sprout Invoices page — we strive for happy! Make sure to review the Sprout Clients features page for more detailed information. As well as the full featured demo. Support Priority support is provided with an upgraded version. All free support will provided in the forums.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C