Vulnerabilities / Zoho CRM Lead Magnet
Zoho CRM Lead Magnet vulnerabilities
Advisories WPSec published for Zoho CRM Lead Magnet. Other sources may list more. Its attack surface: Zoho CRM Lead Magnet on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-13 | WPSEC-2026-0816 | Zoho CRM Lead Magnet <= 1.8.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Site-Wide Post HTML Allowlist Modification | Medium 6.4 | 1.8.2.4 |
| 2026-10-13 | WPSEC-2026-0815 | Zoho CRM Lead Magnet <= 1.8.2.3 - Improper Certificate Validation via Globally Disabled SSL Verification | Medium 4.8 | 1.8.2.4 |
| 2026-10-13 | WPSEC-2026-0814 | Zoho CRM Lead Magnet <= 1.8.2.3 - Unauthenticated Reflected Cross-Site Scripting via Form Field Values | Medium 6.1 | 1.8.2.4 |
| 2026-10-13 | WPSEC-2026-0813 | Zoho CRM Lead Magnet <= 1.8.2.3 - Missing Authorization to Authenticated (Subscriber+) Contact Form Field Mapping and CRM User Disclosure | Medium 4.3 | 1.8.2.4 |
License: CC BY 4.0