Remote Code Execution in DoLeads Integrator WordPress Plugin

Executive Summary

CVE-2026-4375 affects two WordPress plugins: DoLeads Integrator (versions 1.2.2 and below) and wp2epub (versions 0.65 and below).

Both plugins are vulnerable to unauthenticated Remote Code Execution (RCE) due to unclosed extensions from WordPress.org that can be exploited by unauthorized users.

This vulnerability allows attackers to execute arbitrary code on the affected WordPress sites without authentication.

Useful 0 Not Useful 0

Detection Guidance

To detect the presence of the vulnerable DoLeads Integrator and wp2epub WordPress plugins on your system, you can check the installed plugins list in your WordPress installation for versions 1.2.2 and below for DoLeads Integrator and 0.65 and below for wp2epub.

Since the vulnerability involves unauthenticated Remote Code Execution via unclosed extensions, monitoring for unusual HTTP requests or unexpected plugin installation attempts from unauthorized users could help identify exploitation attempts.

Suggested commands to detect the vulnerable plugins include:

• Using WP-CLI to list installed plugins and their versions: wp plugin list
• Searching for plugin directories on the server: find /path/to/wordpress/wp-content/plugins/ -name 'doleads-integrator' -o -name 'wp2epub'
• Checking plugin version files, for example: cat /path/to/wordpress/wp-content/plugins/doleads-integrator/readme.txt or main plugin PHP file for version info.
• Monitoring web server logs for suspicious requests that could indicate exploitation attempts.

Note that no fixes are currently available for these plugins, so detection and mitigation rely on identifying and removing or disabling the vulnerable plugins.

Useful 0 Not Useful 0

Compliance Impact

The provided information does not specify how CVE-2026-4375 affects compliance with common standards and regulations such as GDPR or HIPAA.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability allows attackers to execute arbitrary code remotely on your WordPress site if you are using the affected versions of the DoLeads Integrator or wp2epub plugins.

• Attackers can gain control over your website.
• They may be able to modify, delete, or steal data.
• It can lead to site defacement, data breaches, or further attacks on your infrastructure.

Useful 0 Not Useful 0

Mitigation Strategies

There are currently no fixes available for the DoLeads Integrator and wp2epub WordPress plugins affected by this vulnerability.

Since the vulnerability allows unauthenticated Remote Code Execution (RCE) due to unclosed extensions from WordPress.org, immediate mitigation steps include removing or disabling these vulnerable plugins from your WordPress installation to prevent exploitation.

Additionally, monitor your WordPress site for any unauthorized plugin installations or suspicious activity and restrict plugin installation permissions to trusted administrators only.

Useful 0 Not Useful 0