cleantalk
Vulnerabilities and Security Researches

WP2LEADS | WordPress und KlickTipp einfach verbinden – WooCommerce und KlickTipp einfach verbinden, CVE-2025-49316

CVE, Research URL

CVE-2025-49316

Home page URL

Security reports for WP2LEADS | WordPress und KlickTipp einfach verbinden – WooCommerce und KlickTipp einfach verbinden

Application

WP2LEADS | WordPress und KlickTipp einfach verbinden – WooCommerce und KlickTipp einfach verbinden

Published on
Jun 17, 2025
Research Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saleswonder Team Tobias WP2LEADS allows Reflected XSS. This issue affects WP2LEADS: from n/a through 3.5.0.
Affected versions
Min -, max 3.5.1.
Status
vulnerable
Previous vulnerability researches
All-In-One Security (AIOS) – Security and Firewall (CVE-2022-4346) , Jun 07, 2024
All-In-One Security (AIOS) – Security and Firewall (CVE-2023-0156) , Jun 07, 2024
All-In-One Security (AIOS) – Security and Firewall (CVE-2023-0157) , Jun 07, 2024
All-In-One Security (AIOS) – Security and Firewall (CVE-2023-52147) , Jun 07, 2024
All-In-One Security (AIOS) – Security and Firewall (CVE-2024-1037) , Jun 07, 2024
New vulnerability
Football Pool (CVE-2025-5490) , Jun 20, 2025
CubeWP Forms – LeadGen & Contact Form (CVE-2025-49880) , Jun 20, 2025
WP2LEADS | WordPress und KlickTipp einfach verbinden – WooCommerce und KlickTipp einfach verbinden (CVE-2025-49316) , Jun 20, 2025
Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit (CVE-2025-1562) , Jun 20, 2025
eCommerce Product Catalog Plugin for WordPress (CVE-2025-49331) , Jun 20, 2025