Advisories · Technology

Saleswonder Team: Tobias WP2LEADS.

Every CVE that names Saleswonder Team: Tobias WP2LEADS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-49316 CVE record

CVSS 7.1 High

WordPress WP2LEADS plugin <= 3.5.0 - Reflected Cross Site Scripting (XSS) vulnerability
- Saleswonder Team: Tobias WP2LEADS
- Cross-site scripting (XSS)
Not analysed yet 17 Jun 2025
CVE-2025-32922 CVE record

CVSS 7.1 High

WordPress WP2LEADS plugin <= 3.5.0 - Cross Site Request Forgery (CSRF) vulnerability
- Saleswonder Team: Tobias WP2LEADS
- Cross-site request forgery (CSRF)
Not analysed yet 15 May 2025
CVE-2025-30827 CVE record

CVSS 7.1 High

WordPress WP2LEADS plugin <= 3.4.5 - Reflected Cross Site Scripting (XSS) vulnerability
- Saleswonder Team: Tobias WP2LEADS
- Cross-site scripting (XSS)
Not analysed yet 1 Apr 2025
CVE-2025-24565 CVE record

CVSS 7.1 High

WordPress WP2LEADS plugin <= 3.3.3 - Reflected Cross Site Scripting (XSS) vulnerability
- Saleswonder Team: Tobias WP2LEADS
- Cross-site scripting (XSS)
Not analysed yet 14 Feb 2025
CVE-2024-56065 CVE record

CVSS 7.1 High

WordPress WP2LEADS Plugin <= 3.4.2 - Reflected Cross Site Scripting (XSS) vulnerability
- Saleswonder Team: Tobias WP2LEADS
- Cross-site scripting (XSS)
Not analysed yet 13 Jan 2025
CVE-2024-31375 CVE record

CVSS 5.4 Medium

WordPress WP2LEADS plugin <= 3.2.7 - Broken Access Control vulnerability
- Saleswonder Team: Tobias WP2LEADS
- Broken access control
Not analysed yet 8 Apr 2024