LeadBI Plugin for WordPress vulnerabilities | LiveThreat CVE Feed

Product

LeadBI Plugin for WordPress

by leadbi · last CVE Jan 24, 2026

CVEs

On KEV

6.5

Max CVSS

New 30D

Severity mix

Critical 0High 0Medium 2Low 0

Severity

Exploitation

Watch

Add LeadBI Plugin for WordPress to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-49960	6.5	0%	Oct 22	WordPress LeadBI Plugin for WordPress plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability Affected: through 1.7
CVE-2026-1189	6.4	0%	Jan 24	LeadBI Plugin for WordPress <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'form_id' Shortcode Attribute Affected: through 1.7