๐Ÿ” CVE Alert

CVE-2026-4375

CRITICAL 9.0

DoLeads Integrator <= 1.2.2 & wp2epub <= 0.65 - Unauthenticated RCE

CVSS Score
9.0
EPSS Score
0.2%
EPSS Percentile
5th

The DoLeads Integrator WordPress plugin through 0.65, wp2epub WordPress plugin through 0.65 have been seen to be used to achieve RCE, once they are added adding to a blog, for example using a vulnerability where unclosed extensions from wordpress.org can be installed by unauthorized users.

Vendor unknown
Product doleads integrator
Published Jul 7, 2026
Last Updated Jul 7, 2026
Stay Ahead of the Next One

Get instant alerts for unknown doleads integrator

Be the first to know when new critical vulnerabilities affecting unknown doleads integrator are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

Affected Versions

Unknown / DoLeads Integrator
0 โ‰ค 0.65
Unknown / wp2epub
0 โ‰ค 0.65

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
wpscan.com: https://wpscan.com/vulnerability/dd043e6c-e6c6-4c8d-aab0-5265d28f5cf6/

Credits

Erwan LR (WPScan) WPScan