CyberRota Analysis
AI-GeneratedThe vulnerability in WP2LEADS versions up to 3.5.7 allows for broken access control, potentially enabling unauthorized users to access sensitive subscriber data. This high-severity issue poses a significant risk to organizations using this software, particularly those handling sensitive customer information. It is crucial for affected users to prioritize immediate remediation to mitigate potential data breaches.
CVE
CVE-2026-25433
Severity
HIGH
CVSS
7.1
EPSS
0.35%
Original NVD Description
Subscriber Broken Access Control in WP2LEADS <= 3.5.7 versions.