The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The CRM and Lead Management by vcita plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the vcita_ajax_toggle_ae() function in all versions up to, and including, 2.7.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to enable and disable plugin widgets.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Crm Customer Relationship Management By Vcita Plugin | — | Update crm-customer-relationship-management-by-vcita plugin to version 2.8.0, or a newer patched version | Jul 23, 2025 | Mar 12, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub