Skip to content
CVE PROGRAM SOURCE RECORD9.0 Critical

CVE-2026-4375

DoLeads Integrator <= 1.2.2 & wp2epub <= 0.65 - Unauthenticated RCE

Description

The DoLeads Integrator WordPress plugin through 0.65, wp2epub WordPress plugin through 0.65 have been seen to be used to achieve RCE, once they are added adding to a blog, for example using a vulnerability where unclosed extensions from wordpress.org can be installed by unauthorized users.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown DoLeads Integrator

Default version status: unknown

  • 0 to ≤ 0.65affected

Unknown wp2epub

Default version status: unknown

  • 0 to ≤ 0.65affected

References