CVE-2025-62134: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in A WP Life Contact Form Widget new-contact-form-widget allows Cross Site Request Forgery.This issue affects Contact Form Widget: from n/a through = 1.5.1...

CVE-2025-47491: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in A WP Life Contact Form Widget new-contact-form-widget allows Cross Site Request Forgery.This issue affects Contact Form Widget: from n/a through = 1.4.6...

CVE-2024-48037: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in A WP Life Contact Form Widget new-contact-form-widget allows Cross Site Request Forgery.This issue affects Contact Form Widget: from n/a through = 1.4.2...

WordPress new-contact-form-widget plugin SQL Injection Vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. new-contact-form-widget is a contact form builder plugin used in it. A SQL injection vulnerability exists in the WordPress...

CVE-2019-17072: Improper Neutralization of Special Elements used in an SQL Command

The new-contact-form-widget aka Contact Form Widget - Contact Query, Form Maker plugin 1.0.9 for WordPress has SQL Injection via all-query-page.php...

PT-2019-14938

Name of the Vulnerable Software and Affected Versions new-contact-form-widget plugin version 1.0.9 Description The issue is related to SQL Injection, which occurs via the all-query-page.php file. Recommendations For version 1.0.9, update to a newer version that contains a fix for this issue...