iLeads SMS Gateway by Exsile vulnerabilities
We track 1 vulnerability in iLeads SMS Gateway by Exsile products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 7, 2026.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest iLeads SMS Gateway by Exsile vulnerabilities
- 8.8 High severity
iLeads SMS Gateway by Exsile: Improper Privilege Management
The iLeads SMS Gateway by Exsile WordPress plugin before 2.0.0 does not check capabilities or nonces in several AJAX actions that update a site option chosen by the request, allowing any authenticated user, such as a subscriber, to change arbitrary WordPress o