A vulnerability was found in SALESmanago & Leadoo Plugin up to 3.11.2 on WordPress and classified as critical. Impacted is an unknown function. Such manipulation leads to sql injection.

This vulnerability is documented as CVE-2026-10835. The attack can be executed remotely. There is not any exploit available.

It is suggested to upgrade the affected component.