A vulnerability was found in kevin-brent Mortgage Lead Capture System Plugin up to 8.2.10 on WordPress and classified as problematic. Affected by this issue is the function
wprequal_reset_defaults
of the component Setting Handler. The manipulation leads to cross-site request forgery.
This vulnerability is handled as CVE-2025-0796. The attack may be launched remotely. There is no exploit available.