All 6 CVE vulnerabilities found in SALESmanago & Leadoo, with AI-generated Chinese analysis, references, and POCs.
Vendor: salesmanag0
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-10835 | SALESmanago & Leadoo < 3.11.3 - Subscriber+ SQL Injection | - | - | 2026-06-26 |
| CVE-2026-54822 | WordPress SALESmanago & Leadoo plugin <= 3.11.2 - SQL Injection vulnerability CWE-89 | 8.5 | High | 2026-06-25 |
| CVE-2025-68571 | WordPress SALESmanago plugin <= 3.9.0 - Broken Access Control vulnerability CWE-862 | 5.3 | Medium | 2025-12-24 |
| CVE-2025-57971 | WordPress SALESmanago Plugin <= 3.8.1 - Broken Access Control Vulnerability CWE-862 | 5.3 | Medium | 2025-09-22 |
| CVE-2025-57970 | WordPress SALESmanago Plugin <= 3.8.1 - Cross Site Request Forgery (CSRF) Vulnerability CWE-352 | 4.3 | Medium | 2025-09-22 |
| CVE-2023-4939 | SALESmanago <= 3.2.4 - Log Injection via Weak Authentication Token CWE-305 | 5.3 | Medium | 2023-10-21 |
All 6 known CVE vulnerabilities affecting SALESmanago & Leadoo with full Chinese analysis, references, and POCs where available.