Input validation vulnerability in WordPress Landing Page – Squeeze Page – Responsive Landing Page Builder Free – WP Lead Plus X 0.99

The WP Lead Plus X plugin for WordPress is vulnerable to a security issue called Cross-Site Request Forgery. This vulnerability is present in versions up to, and including, 0.99. This means that if a malicious person can trick a site administrator into clicking on a link, they can perform certain administrative actions without the administrator’s permission, such as adding pages to the site and/or replacing site content with malicious JavaScript. This is caused by a missing or incorrect form of security validation called a nonce.