Skip to content
Info Published: Dec 14, 2025

CVE-2025-12696

0 CVSS Score Info
Export:
Share:
Link copied!

Description

The HelloLeads CRM Form Shortcode WordPress plugin through 1.0 does not have authorisation and CSRF check when resetting its settings, allowing unauthenticated users to reset them