Contact Us By Lord Linus Vulnerabilities

[en] Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rohitashv Singhal Contact Us By Lord Linus allows Reflected XSS. This issue affects Contact Us By Lord Linus: from n/a through 2.6.

Affected:

up to 2.6

Fix:

No patched version reported

Disclosed:

Mar 3, 2025

CVE-2025-25127 on NVD →

The Contact Us By Lord Linus plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.6. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forg...

CVSS:

6.1

Affected:

up to 2.6

Fix:

No patched version reported

Disclosed:

Feb 17, 2025

CVE-2025-1382 on NVD →

The Contact Us By Lord Linus plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 2.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can succe...

CVSS:

6.1

Affected:

up to 2.6

Fix:

No patched version reported

Disclosed:

Feb 2, 2025

CVE-2025-25127 on NVD →

Affected:

up to 2.6

Fix:

No patched version reported

CVE-2025-1382 on NVD →