leadbi LeadBI Plugin for WordPress

• CVE-2026-1189 Medium 6.4 LeadBI Plugin for WordPress <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'form_id' Shortcode Attribute 0.2%
• CVE-2025-49960 Medium 6.5 WordPress LeadBI Plugin for WordPress plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability 0.2%