CF
Product
Contact Form & Lead Form Elementor Builder
7
CVEs
0
On KEV
7.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 6Low 0
Watch
Add Contact Form & Lead Form Elementor Builder to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-32532 | 7.1 | Mar 25 | WordPress Contact Form & Lead Form Elementor Builder plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability Affected: through <= 2.0.1 |
| CVE-2024-3637 | 6.1 | May 3 | The Responsive Contact Form Builder & Lead Generation Plugin WordPress plugin through 1.8.9 does not sanitise and escape some of its settings, which could allow high privilege… Affected: through 1.8.9 |
| CVE-2021-24967 | 6.1 | Dec 27 | The Contact Form & Lead Form Elementor Builder WordPress plugin before 1.6.4 does not sanitise and escape some lead values, which could allow unauthenticated users to perform… Affected: before 1.6.4 |
| CVE-2023-25969 | 5.4 | Jun 11 | WordPress Contact Form & Lead Form Elementor Builder plugin <= 1.8.4 - Broken Access Control vulnerability Affected: through 1.8.4 |
| CVE-2024-10475 | 4.8 | May 15 | The Responsive Contact Form Builder & Lead Generation Plugin WordPress plugin before 1.9.8 does not sanitise and escape some of its settings, which could allow high privilege… Affected: before 1.9.8 |
| CVE-2022-23179 | 4.8 | Jan 16 | The Contact Form & Lead Form Elementor Builder WordPress plugin before 1.7.0 does not escape some of its form fields before outputting them in attributes, which could allow high… Affected: before 1.7.0 |
| CVE-2022-23180 | 4.3 | Jan 16 | The Contact Form & Lead Form Elementor Builder WordPress plugin before 1.7.4 doesn't have authorisation and nonce checks, which could allow any authenticated users, such as… Affected: before 1.7.4 |
Showing 7