DoLeads Integrator <= 1.2.2 - Unauthenticated Remote Code Execution
criticalThe DoLeads Integrator plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 1.2.2. This is due to insufficient validation of user supplied input before it is executed. This makes it possible for unauthenticated attackers to execute arbitrary code on the server.
- CVSS:
- 9.8
- Affected:
- up to 1.2.2
- Fix:
- No patched version reported
- Disclosed:
- Jun 16, 2026