Security Advisory

CVE-2025-12696

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-12-14 06:00:02

Last updated 2026-04-02 12:39:52

Assigner WPScan

CVSS score not scored

State PUBLISHED

Description

The HelloLeads CRM Form Shortcode WordPress plugin through 1.0 does not have authorisation and CSRF check when resetting its settings, allowing unauthenticated users to reset them

← Browse all CVEs View on cve.org ↗