CVE-2025-30810: Smackcoders Inc Lead Form Data Collection To CRM

High severity, CVSS 8.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Smackcoders Inc., Lead Form Data Collection to CRM wp-leads-builder-any-crm allows Blind SQL Injection.This issue affects Lead Form Data Collection to CRM: from n/a through <= 3.0.1.

Affected products

• Smackcoders Inc Lead Form Data Collection To CRM: up to and including 3.0.1

Published 2025-03-27. Last modified 2026-06-17.