Advisories · Technology

SALESmanago & Leadoo.

Every CVE that names SALESmanago & Leadoo among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-10835 CVE record

CVSS 7.7 High

SALESmanago & Leadoo < 3.11.3 - Subscriber+ SQL Injection
- SALESmanago & Leadoo
Not analysed yet 26 Jun 2026
CVE-2026-54822 CVE record

CVSS 8.5 High

WordPress SALESmanago & Leadoo plugin <= 3.11.2 - SQL Injection vulnerability
- SALESmanago & Leadoo
- SQL injection
Not analysed yet 25 Jun 2026
CVE-2025-68571 CVE record

CVSS 5.3 Medium

WordPress SALESmanago plugin <= 3.9.0 - Broken Access Control vulnerability
- SALESmanago & Leadoo
- Broken access control
Not analysed yet 24 Dec 2025
CVE-2025-57970 CVE record

CVSS 4.3 Medium

WordPress SALESmanago Plugin <= 3.8.1 - Cross Site Request Forgery (CSRF) Vulnerability
- SALESmanago & Leadoo
- Cross-site request forgery (CSRF)
Not analysed yet 22 Sept 2025
CVE-2025-57971 CVE record

CVSS 5.3 Medium

WordPress SALESmanago Plugin <= 3.8.1 - Broken Access Control Vulnerability
- SALESmanago & Leadoo
- Broken access control
Not analysed yet 22 Sept 2025