PULSE
EN
FEED
ransombooba project reclama a Aesthetic Specialty Centre · PK · Healthcareransombooba project reclama a City of Big Spring · US · Government & Defenseransombooba project reclama a KING FAMILY MEDICAL · US · Healthcareransombooba project reclama a Charter Township of Commerce · US · Government & Defenseransombooba project reclama a Regent Christian Online Academy · CA · Educationransomaurora reclama a GreenbergFarrow · Professional Servicesransomwallstreet reclama a Bristol City Council · GB · Government & Defenseransomqilin reclama a NuVista Federal Credit Union · US · Financial Servicesransomqilin reclama a Hawaii Law Enforcement Fedral Credit Union · US · Financial Servicesransomn0n reclama a Company #111 · AEransomeverest reclama a OR Technology · Technologyransomeverest reclama a Burris & MacOmber · Professional Servicesransomeverest reclama a Energy Storage Terminal in Singapore · SG · Energy & Utilitiesransomeverest reclama a Point Robotics · Technologyransombooba project reclama a Aesthetic Specialty Centre · PK · Healthcareransombooba project reclama a City of Big Spring · US · Government & Defenseransombooba project reclama a KING FAMILY MEDICAL · US · Healthcareransombooba project reclama a Charter Township of Commerce · US · Government & Defenseransombooba project reclama a Regent Christian Online Academy · CA · Educationransomaurora reclama a GreenbergFarrow · Professional Servicesransomwallstreet reclama a Bristol City Council · GB · Government & Defenseransomqilin reclama a NuVista Federal Credit Union · US · Financial Servicesransomqilin reclama a Hawaii Law Enforcement Fedral Credit Union · US · Financial Servicesransomn0n reclama a Company #111 · AEransomeverest reclama a OR Technology · Technologyransomeverest reclama a Burris & MacOmber · Professional Servicesransomeverest reclama a Energy Storage Terminal in Singapore · SG · Energy & Utilitiesransomeverest reclama a Point Robotics · Technology
← Todos los CVEs
CVE Watch7 oct 2026

CVE-2025-12696

The HelloLeads CRM Form Shortcode WordPress plugin through 1.0 does not have authorisation and CSRF check when resetting its settings, allow

CVSS

5.3

Medio

EPSS

0.1%

p3

KEV

—

Exploit Today

1

0-100

Publicado: 14 dic 2025 · Última mod.: 7 oct 2026

EPSS · 30d
0.1%EPSS · 30 días0.1%
2026-09-282026-10-26
Descripción técnica

The HelloLeads CRM Form Shortcode WordPress plugin through 1.0 does not have authorisation and CSRF check when resetting its settings, allowing unauthenticated users to reset them

Referencias oficiales
CVEs relacionados

Sin CVEs relacionados por CWE o producto.