ysinnovations YS LeadGen

2 known vulnerabilities in ysinnovations YS LeadGen, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

CVE-2026-1256 CVSS 6.4 medium The YS LeadGen plugin for WordPress is vulnerable to authorization bypass and Stored Cross-Site Scripting via multiple AJAX endpoints in…
CVE-2026-1255 CVSS 7.5 high The YS LeadGen plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.4 due to the…