CVE-2024-48037: WordPress Contact Form Widget plugin <= 1.4.2 - CSRF vulnerability

WordPress Contact Form Widget plugin <= 1.4.2 - CSRF vulnerability

Status

Published

2024-10-17

Updated

2026-04-28

Assigning organization

Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in A WP Life Contact Form Widget new-contact-form-widget allows Cross Site Request Forgery.This issue affects Contact Form Widget: from n/a through <= 1.4.2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

A WP Life Contact Form Widget

Default version status: unaffected

0 to ≤ 1.4.2affected

References

https://patchstack.com/database/Wordpress/Plugin/new-contact-form-widget/vulnerability/wordpress-contact-form-widget-contact-query-contact-page-form-maker-query-table-plugin-1-4-2-csrf-vulnerability?_s_id=cve ↗