OCTOBER 6, 2026
Live Feed
Back to database
Case File

CVE-2026-25434

HIGH · CVSS 8.5 EPSS 0.34%

Source: NVD + CISA KEV + EPSS · Published 2026-10-06 · Last synced 2026-10-06

CyberRota Analysis

AI-Generated

The vulnerability in WP2LEADS versions up to 3.5.7 allows for SQL injection attacks, potentially enabling unauthorized access to sensitive data within the application. Organizations using this software should prioritize remediation efforts, as successful exploitation could lead to data breaches and compromise user information. Immediate action is recommended for all users of affected versions to mitigate the risk.

CVE
CVE-2026-25434
Severity
HIGH
CVSS
8.5
EPSS
0.34%

Original NVD Description

Subscriber SQL Injection in WP2LEADS <= 3.5.7 versions.