CVE-2026-120834: WordPress WP2LEADS plugin <= 3.5.17 - Privilege Escalation vulnerability

Q: Who can exploit this vulnerability?

The CVSS vector indicates it can be exploited remotely with no privileges or user interaction required. The available data does not identify any additional preconditions.

Q: Which installations are affected?

WP2LEADS versions through 3.5.17 are affected. The affected version range begins at an unspecified earlier version.

Q: What security impact can exploitation have?

The vulnerability allows privilege escalation. The assigned CVSS metrics indicate potential low impact to confidentiality, integrity, and availability.

Published Nov 9, 2026

Updated

Incorrect Privilege Assignment vulnerability in Tobias WP2LEADS wp2leads allows Privilege Escalation.This issue affects WP2LEADS: from n/a through 3.5.17.

Affected Software

1 affected component

Tobias WP2LEADS<=3.5.17

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WP2LEADS WordPress plugin to a version that resolves this vulnerability.
Fixed in 3.5.18

Event History

Nov 9, 2026

CVE Published

via MITRE·06:09 PM

Data Sourced

via MITRE·06:09 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this vulnerability?

The CVSS vector indicates it can be exploited remotely with no privileges or user interaction required. The available data does not identify any additional preconditions.

Which installations are affected?

WP2LEADS versions through 3.5.17 are affected. The affected version range begins at an unspecified earlier version.

What security impact can exploitation have?

The vulnerability allows privilege escalation. The assigned CVSS metrics indicate potential low impact to confidentiality, integrity, and availability.

CVE-2026-120834: WordPress WP2LEADS plugin <= 3.5.17 - Privilege Escalation vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Who can exploit this vulnerability?

Which installations are affected?

What security impact can exploitation have?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this vulnerability?

Which installations are affected?

What security impact can exploitation have?