Skip to content
OpenAdvisories
High · 7.5 CVE-2025-31045 EUVD-2025-17491GHSA-72wr-ppf8-hh4v

WordPress elfsight Contact Form widget plugin <= 2.3.1 - Sensitive Data Exposure Vulnerability

Published Jun 9, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in elfsight elfsight Contact Form widget elfsight-contact-form allows Retrieve Embedded Sensitive Data.This issue affects elfsight Contact Form widget: from n/a through <= 2.3.1.

Affected products

VendorProductAffectedFixed
elfsight elfsight Contact Form widget ≤ 2.3.1 —

References