Tobias vulnerabilities and threats

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.3		CVE-2026-120834WP2LEADS (WordPress plugin) · Incorrect Privilege Assignment High7.32026-11-09CVE Database V5CVE-2026-120834 CVE-2026-120834 is an Incorrect Privilege Assignment vulnerability in the Tobias WP2LEADS plugin, affecting versions from initial release up to 3.5.17. This flaw allows unauthorized privilege escalation. The issue is addressed in version 3.5.18. Vulnerability Tobias	CVE Database V5	2026-11-09
Medium	5.3	EPSS 0.2%	CVE-2026-27393CF7 WOW Styler (WordPress plugin) · Missing Authorization Medium5.3EPSS 0.2%2026-05-21CVE Database V5CVE-2026-27393 Missing Authorization vulnerability in Tobias CF7 WOW Styler allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects CF7 WOW Styler: from n/a through 1.7.6. EPSS 0.2%Vulnerability Tobias CWE-862	CVE Database V5	2026-05-21

Page 1 of 1