Wpdevart Contact Form Builder
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Wpdevart Contact Form Builder.
By the Year
In 2026 there have been 1 vulnerability in Wpdevart Contact Form Builder with an average score of 6.1 out of ten. Contact Form Builder did not have any published security vulnerabilities last year. That is, 1 more vulnerability have already been reported in 2026 as compared to last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 1 | 6.10 |
| 2025 | 0 | 0.00 |
| 2024 | 0 | 0.00 |
| 2023 | 1 | 6.10 |
It may take a day or so for new Contact Form Builder vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Wpdevart Contact Form Builder Security Vulnerabilities
XSS in WP Contact Form Builder 1.6.1 (code_generator.php)
CVE-2022-50959
6.1 - Medium
- May 10, 2026
WordPress Contact Form Builder 1.6.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by exploiting the form_id parameter. Attackers can craft malicious URLs to code_generator.php with script payloads in the form_id parameter to execute arbitrary JavaScript in victim browsers.
XSS
Unauth. XSS in wpdevart Contact Form Builder <= 2.1.6
CVE-2023-46075
6.1 - Medium
- October 26, 2023
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in wpdevart Contact Form Builder, Contact Widget plugin <= 2.1.6 versions.
XSS
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Wpdevart Contact Form Builder or by Wpdevart? Click the Watch button to subscribe.
