Advisories · Technology

varunvairavanlc LeadConnector.

Every CVE that names varunvairavanlc LeadConnector among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-81298 CVE record

CVSS 7.1 High

WordPress LeadConnector plugin <= 4.0.5 - Cross Site Scripting (XSS) vulnerability
- varunvairavanlc LeadConnector
- Cross-site scripting (XSS)
Not analysed yet 31 Aug 2026
CVE-2026-25441 CVE record

CVSS 5.3 Medium

WordPress LeadConnector plugin <= 3.0.21 - Broken Access Control vulnerability
- varunvairavanlc LeadConnector
- Broken access control
Not analysed yet 19 Feb 2026
CVE-2024-1371 CVE record

CVSS 6.5 Medium

LeadConnector <= 1.7 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
- varunvairavanlc LeadConnector
- Broken access control
Not analysed yet 30 Apr 2024