Medium · 4.3 CVE-2022-47166 EUVD-2022-49941GHSA-5h6v-v9j7-9ffj

WordPress Void Contact Form 7 Widget For Elementor Page Builder Plugin <= 2.1.1 is vulnerable to Cross Site Request Forgery (CSRF)

Published Mar 13, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in voidCoders Void Contact Form 7 Widget For Elementor Page Builder plugin <= 2.1.1 versions.

Vendor	Product	Affected	Fixed
voidCoders	Void Contact Form 7 Widget For Elementor Page Builder	≤ 2.1.1	—