# Zoho CRM Lead Magnet Plugin

> Zoho CRM Lead Magnet Plugin version 1.6.9 is vulnerable to an Authenticated Cross-Site Scripting attack. The vulnerability would allow an attacker to…

- Address: https://www.wordpromise.com/zoho-crm-lead-magnet-plugin/
- Published: 2019-11-01
- Updated: 2026-09-25
- Author: Vinay Bansal

[Zoho CRM Lead Magnet Plugin](https://wordpress.org/plugins/zoho-crm-forms/) version 1.6.9 is vulnerable to an Authenticated Cross-Site Scripting attack. The vulnerability would allow an attacker to execute malicious code in a user’s browser.

#### What You Should Do

The vulnerability has been patched, and you should update it to version 1.6.9.1.