Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-25320 EUVD-2026-8217GHSA-9wpf-8r7r-qrff

WordPress Elementor Contact Form DB plugin <= 2.1.3 - Broken Access Control vulnerability

Published Feb 19, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Cool Plugins Product: Elementor Contact Form DB

Description

Missing Authorization vulnerability in Cool Plugins Elementor Contact Form DB sb-elementor-contact-form-db allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elementor Contact Form DB: from n/a through <= 2.1.3.

Affected products

VendorProductAffectedFixed
Cool Plugins Elementor Contact Form DB ≤ 2.1.3 —

References