CVE-2026-27540 | Wholesale Lead Capture Plugin up to 1.17.8 on WordPress unrestricted upload

A vulnerability marked as critical has been reported in Wholesale Lead Capture Plugin up to 1.17.8 on WordPress. This issue affects some unknown processing. The manipulation leads to unrestricted upload.

This vulnerability is listed as CVE-2026-27540. The attack may be initiated remotely. There is no available exploit.