WPrequal

WPrequal has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).

The one issue recorded for WPrequal has a vendor fix available, so running the current release closes it.

All of these findings were reported by Dhabaleshwar Das. WPrequal is installed on roughly 80 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium
4.3/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all WPrequal vulnerabilities before they are exploited.

Highest severity on recordCVSS 4.3CVE-2025-0796

Mortgage Lead Capture System <= 8.2.11 - Cross-Site Request Forgery to Settings Reset

Read the full analysis

Vulnerability Records

1 records
WPrequal banner
Latestv8.4.2
4.3(4)
86/100
Last Updated
2026-06-24 (3mo ago)
Active Installs
80+
Downloads
26,538
Requires WP
4.0+
Requires PHP
7.4+
Tested up to
WP 7.0.4
Created
2016-10-28 (10y ago)

Would it be great to generate and capture pre-qualified leads right on your website? Now you can! WPrequal is the only WordPress plugin that delivers a complete lead generation system directly to your WordPress website or landing page. It’s perfect for any business that depends on identifying strong leads: &#x2611; Mortgage Lenders &#x2611; Realtors &#x2611; Home Builders &#x2611; Any Industry . . . With WPrequal, you can easily build lead generating survey forms using our template or customize one yourself. Use our survey, developed by an industry professional with 20+ years experience, or create your own, using as many fields as you need. WPrequal does not sell your leads. The leads are yours and yours only! Plus, as a WordPress plugin, you don’t have to leave your website to use WPrequal. The tool easily loads to your WordPress site and can be used on any page, with different designs if you wish. FREE License Best of all, there’s a free version of WPrequal to try out! It delivers: Basic Survey form Basic Contact form builder Registration form builder Mortgage and amortization calculators Lead Manager tool with email notification Plugin updates Product support Premium License Need more flexibility? Try WPrequal’s Affordable Pro or Premium Features Once you’ve used the WPrequal plug-in, you’ll probably wish you could do more with it. Pro and Premium versions include the features in the free version, plus customization tools: Fully customizable Survey forms, contact forms, and registration forms with custom colors, and the FontAwesome Icon Library Access to all lead fields Font Awesome Pro integration Product and technical support Notifications via text/SMS, email, or the Lead Manager tool Confirmation redirects Go Premium Pro License The WPrequal Pro license delivers access to time-saving CRMs via the Connect API. In addition to Pro tools, you’ll get: Enhanced calculator Pop-up messaging Support and integration with CRM tools: Advanced support Access to Connect API Active Campaign Agile CRM Capsule ConstantContact iMax CRM LionDesk MailChimp Zapier Webhooks Zoho CRM Go Pro Landing Pages We also offer a license to support landing pages. It includes everything in Pro plus: &#x2611; Secure hosting &#x2611; Page maintenance &#x2611; Social media &#x2611; Image Library &#x2611; Structured data &#x2611; Priority support Get Landing Page Helpful Resources WPrequal Support How-to Guides Shortcode Examples Developer Documentation Connect API

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C