OCTOBER 6, 2026
Live Feed
Back to database
Case File

CVE-2026-25433

HIGH · CVSS 7.1 EPSS 0.35%

Source: NVD + CISA KEV + EPSS · Published 2026-10-06 · Last synced 2026-10-06

CyberRota Analysis

AI-Generated

The vulnerability in WP2LEADS versions up to 3.5.7 allows for broken access control, potentially enabling unauthorized users to access sensitive subscriber data. This high-severity issue poses a significant risk to organizations using this software, particularly those handling sensitive customer information. It is crucial for affected users to prioritize immediate remediation to mitigate potential data breaches.

CVE
CVE-2026-25433
Severity
HIGH
CVSS
7.1
EPSS
0.35%

Original NVD Description

Subscriber Broken Access Control in WP2LEADS <= 3.5.7 versions.