Description
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in wpdevart Contact Form Builder, Contact Widget plugin <= 2.1.6 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| wpdevart | Contact Form Builder, Contact Widget | ≤ 2.1.6 | — |
High · 7.1
CVE-2023-46075
EUVD-2023-50336GHSA-g7h4-rggv-pcc4
WordPress Contact Form Builder, Contact Widget Plugin <= 2.1.6 is vulnerable to Cross Site Scripting (XSS)
Published Oct 26, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack