Wpdevart Contact Form Builder vulnerabilities

2 vulnerabilities

Known vulnerabilities in Wpdevart Contact Form Builder, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1CVE-2022-50959wordpresscontact-forms-builder+1
EPSS score
0.21%
WordPress Contact Form Builder 1.6.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by exploiting the form_id parameter. Attackers can craft malicious URLs to code_generator.php with script payloads in the form_id parameter to execute arbitrary JavaScript in victim browsers.7.1CVE-2023-46075wordpresscontact-forms-builder+2
EPSS score
0.33%
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in wpdevart Contact Form Builder, Contact Widget plugin <= 2.1.6 versions.