WP Lead Plus X Update
3008Warning Date
Severity Level
Warning Number
Target Sector
9 April, 2020
● Critical
2020-1118
All
Description:
WordPress has released a security update to address multiple vulnerabilities in the following plugin:
- WP Lead Plus X
- Up to and include 0.99
Threats:
An attacker could exploit these vulnerabilities by doing the following:
- Cross-site request forgery (CSRF)
- Cross-site scripting (XSS)
Best practice and Recommendations:
The CERT team encourages users to apply the necessary update according to the link below: