High · 7.5 CVE-2025-29000 EUVD-2025-21605GHSA-7fj7-r7pv-xhrq

WordPress Multi-language Responsive Contact Form plugin <= 2.8 - Broken Access Control Vulnerability

Published Jul 16, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: August Infotech Product: Multi-language Responsive Contact Form

Description

Missing Authorization vulnerability in August Infotech Multi-language Responsive Contact Form responsive-contact-form allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Multi-language Responsive Contact Form: from n/a through <= 2.8.

Affected products

Vendor	Product	Affected	Fixed
August Infotech	Multi-language Responsive Contact Form	≤ 2.8	—

References

https://patchstack.com/database/Wordpress/Plugin/responsive-contact-form/vulnerability/wordpress-multi-language-responsive-contact-form-2-8-broken-access-control-vulnerability?_s_id=cve vdb-entry