plugin
7 known security issues reported for the Leads 5050 Visitor Insights WordPress plugin. Most recent disclosed May 7, 2021.
Running Leads 5050 Visitor Insights on your site? Check whether your installed version is affected.
Scan your site freeThe Leads5050 Visitor Insights plugin for WordPress is vulnerable to Arbitrary License Change in versions before 1.0.4. This is due to insufficient access control on the leads5050_set_license AJAX action. This makes it possible for unauthenticated attackers to set and modify arbitrary licenses in the plugin settings.
The leads5050-visitor-insights plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the leads5050_set_license function in versions up to, and including, 1.0.5. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to edit the license...
Unauthorized License Change vulnerability discovered by WPScan Team in WordPress Leads 5050 Visitor Insights plugin (versions <= 1.0.5).
The leads5050-visitor-insights plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the leads5050_set_license function in versions up to, and including, 1.0.5. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to edit the license...
The Leads5050 Visitor Insights plugin for WordPress is vulnerable to Arbitrary License Change in versions before 1.0.4. This is due to insufficient access control on the leads5050_set_license AJAX action. This makes it possible for unauthenticated attackers to set and modify arbitrary licenses in the plugin settings.
The leads5050_set_license AJAX action was available to unauthenticated users allowing them to set an arbitrary license in the plugins settings
The leads5050_set_license AJAX action is available to authenticated users, but is missing any capability and CSRF checks. This could allow any low privilege users (subscriber+) to set an arbitrary license in the plugins settings
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free