Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-68046 EUVD-2026-3986GHSA-vpw2-wgm3-fpg3

WordPress Contact Form & Lead Form Elementor Builder plugin <= 2.0.1 - Sensitive Data Exposure vulnerability

Published Jan 22, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in ThemeHunk Contact Form & Lead Form Elementor Builder lead-form-builder allows Retrieve Embedded Sensitive Data.This issue affects Contact Form & Lead Form Elementor Builder: from n/a through <= 2.0.1.

Affected products

VendorProductAffectedFixed
ThemeHunk Contact Form & Lead Form Elementor Builder ≤ 2.0.1 —

References