CVE-2026-4375 — DoLeads Integrator <= 1.2.2 & wp2epub <= 0.65 - Unauthenticated RCE
The DoLeads Integrator WordPress plugin through 0.65, wp2epub WordPress plugin through 0.65 have been seen to be used to achieve RCE, once they are added adding to a blog, for e…
Published: 2026-07-07 · CVSS: 9.0 · CVSS 3.1
The DoLeads Integrator WordPress plugin through 0.65, wp2epub WordPress plugin through 0.65 have been seen to be used to achieve RCE, once they are added adding to a blog, for example using a vulnerability where unclosed extensions from wordpress.org can be installed by unauthorized users.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7