CVE-2025-62134: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in A WP Life Contact Form Widget new-contact-form-widget allows Cross Site Request Forgery.This issue affects Contact Form Widget: from n/a through = 1.5.1...

CVE-2025-47491: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in A WP Life Contact Form Widget new-contact-form-widget allows Cross Site Request Forgery.This issue affects Contact Form Widget: from n/a through = 1.4.6...

CVE-2024-48037: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in A WP Life Contact Form Widget new-contact-form-widget allows Cross Site Request Forgery.This issue affects Contact Form Widget: from n/a through = 1.4.2...

CVE-2019-17072: Improper Neutralization of Special Elements used in an SQL Command

The new-contact-form-widget aka Contact Form Widget - Contact Query, Form Maker plugin 1.0.9 for WordPress has SQL Injection via all-query-page.php...

PT-2019-14938

Name of the Vulnerable Software and Affected Versions new-contact-form-widget plugin version 1.0.9 Description The issue is related to SQL Injection, which occurs via the all-query-page.php file. Recommendations For version 1.0.9, update to a newer version that contains a fix for this issue...