Wise Agent Lead Forms
Wise Agent Lead Forms has one disclosed vulnerability in the WordSec catalog, all reported in 2021; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Wise Agent Lead Forms has a vendor fix available, so running the current release closes it.
All of these findings were reported by p7e4. Wise Agent Lead Forms is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2021-38335Wise Agent Capture Forms <= 2.0 - Reflected Cross-Site Scripting
Read the full analysisVulnerability Records

Wise Agent Lead Forms
Author
wiseagentwp
Wise Agent is a powerful real estate CRM platform combining contact management, lead automation, transaction management, and real estate marketing all in one software. Our WordPress plugin lets you easily add capture forms to any page on your WordPress site, funneling leads into your Wise Agent account and automating lead management according to your specified rules. Streamline your lead generation process and maximize your productivity with Wise Agent. Features Capture Form Integration: Add capture forms to any page and effortlessly direct leads into your Wise Agent account. Lead Funneling: Funnel leads into your Wise Agent account, ensuring centralized lead management. Lead Rule Automation: Automate lead management by setting up rules within Wise Agent to trigger personalized marketing content to new leads instantly, based on predefined criteria. Elementor Integration: Seamlessly integrate Wise Agent with Elementor to add capture forms to your Elementor pages. Content Management: Customized post types and meta fields for events and testimonials. Support For any support or inquiries, please contact us at support@wiseagent.com or visit our website at www.wiseagent.com. We’ll be glad to assist you!
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C