ysinnovations
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| YS LeadGen – Popup Builder, Popup Maker & Form Builder for WordPress | Lead Generation, Email Marketing, Sales, Conversions, Opt-Ins & Subscribers | 2 | – | Sep 19, 2026 |
Exploited and recent CVEs
- CVE-2026-1256 YS LeadGen – Popups, Opt-ins & Lead Capture <= 2.1.4 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via User Input 0.4%
- CVE-2026-1255 YS LeadGen – Popups, Opt-ins & Lead Capture <= 2.1.4 - Unauthenticated Information Disclosure in 'ysleadgen_get_captured_data' AJAX Action 0.5%