Vulnerabilities / Contact Form Widget
Contact Form Widget vulnerabilities
Advisories WPSec published for Contact Form Widget – Responsive Contact Form, Query Form & Form Builder. Other sources may list more. Its attack surface: Contact Form Widget on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-03 | WPSEC-2026-0374 | Contact Form Widget <= 1.5.2 - Unauthenticated CSV Injection via Contact Form Submissions | Medium 6.1 | 1.5.3 |
License: CC BY 4.0