Extension WordPress
Vulnérabilités Lead Form Builder & Contact Form
Cette page rassemble les failles publiées pour Lead Form Builder & Contact Form, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Lead Form Builder & Contact Form
12 fiches
Lead Form Builder & Contact Form <= 2.0.1 – Unauthenticated Stored Cross-Site Scripting
The Lead Form Builder & Contact Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers…
*-2.0.1
2.0.2
23/03/2026
Responsive Contact Form Builder & Lead Generation Plugin <= 2.0.1 – Unauthenticated Stored Cross-Site Scripting
The Responsive Contact Form Builder & Lead Generation Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.0.1 via form field submissions. This is due to insufficient input sanitization in…
*-2.0.1
2.0.2
10/03/2026
Contact Form & Lead Form Elementor Builder <= 2.0.1 – Authenticated (Subscriber+) Information Exposure
The Responsive Contact Form Builder & Lead Generation Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.0.1. This makes it possible for authenticated attackers, with Subscriber-level access and above,…
*-2.0.1
2.0.2
20/01/2026
Responsive Contact Form Builder & Lead Generation Plugin <= 1.9.7 – Authenticated (Admin+) Stored Cross-Site Scripting
The Responsive Contact Form Builder & Lead Generation Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.9.7 due to insufficient input sanitization and output escaping. This…
*-1.9.7
1.9.8
03/03/2025
Responsive Contact Form Builder & Lead Generation Plugin <= 1.9.1 – Authenticated (Subscriber+) Arbitrary Shortcode Execution
The Responsive Contact Form Builder & Lead Generation Plugin plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.9.1. This is due to the software allowing users to execute an action…
*-1.9.1
1.9.2
21/05/2024
Responsive Contact Form Builder & Lead Generation Plugin <= 1.9.7 – Authenticated (Admin+) Stored Cross-Site Scripting
The Responsive Contact Form Builder & Lead Generation Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.9.7 due to insufficient input sanitization and output escaping. This…
*-1.9.7
1.9.8
12/04/2024
Responsive Contact Form Builder & Lead Generation Plugin <= 1.8.9 – Missing Authorization
The Responsive Contact Form Builder & Lead Generation Plugin plugin for WordPress is vulnerable to unauthorized access to functionality due to a missing capability check on several functions in all versions up to, and including, 1.8.9. This makes…
*-1.8.9
1.9.0
11/04/2024
Responsive Contact Form Builder & Lead Generation Plugin <= 1.8.9 – Cross-Site Request Forgery
The Responsive Contact Form Builder & Lead Generation Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.8.9. This is due to missing or incorrect nonce validation on several functions.…
*-1.8.9
1.9.0
11/04/2024
Multiple Plugins By ThemeHunk (Various Versions) – Missing Authorization via settings_init
Multiple Plugins By ThemeHunk are vulnerable to unauthorized plugin setting modification due to a missing capability check on the settings_init function in various versions. This makes it possible for unauthenticated attackers to reset plugin settings.
*-1.8.4
1.8.5
22/03/2023
Contact Form & Lead Form Elementor Builder < 1.7.4 – Arbitrary Settings Change
The Contact Form & Lead Form Elementor Builder plugin for WordPress is vulnerable to Arbitrary Settings Change in versions before 1.7.4. This is due to missing capabilities checks on several functions. This makes it possible for authenticated attackers…
[*, 1.7.4)
1.7.4
01/02/2022
Responsive Contact Form Builder & Lead Generation Plugin < 1.7.0 – Authenticated (Admin+) Stored Cross-Site Scripting
The Responsive Contact Form Builder & Lead Generation Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to 1.7.0 (exclusive) due to insufficient input sanitization and output escaping. This makes…
[*, 1.7.0)
1.7.0
05/01/2022
Contact Form & Lead Form Elementor Builder <= 1.6.3 – Unauthenticated Stored Cross-Site Scripting
The Contact Form & Lead Form Elementor Builder WordPress plugin before 1.6.4 does not sanitise and escape some lead values, which could allow unauthenticated users to perform Cross-Site Scripting attacks against logged in admin viewing the inserted Leads
*-1.6.3
1.6.4
29/11/2021
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.