Medium · 5.4 CVE-2024-48037 EUVD-2024-42909GHSA-c9g5-fph2-vp88

WordPress Contact Form Widget plugin <= 1.4.2 - CSRF vulnerability

Published Oct 17, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: A WP Life Product: Contact Form Widget

Description

Cross-Site Request Forgery (CSRF) vulnerability in A WP Life Contact Form Widget new-contact-form-widget allows Cross Site Request Forgery.This issue affects Contact Form Widget: from n/a through <= 1.4.2.

Affected products

Vendor	Product	Affected	Fixed
A WP Life	Contact Form Widget	≤ 1.4.2	—

References

https://patchstack.com/database/Wordpress/Plugin/new-contact-form-widget/vulnerability/wordpress-contact-form-widget-contact-query-contact-page-form-maker-query-table-plugin-1-4-2-csrf-vulnerability?_s_id=cve vdb-entry