plugin

Elfsight Contact Form Vulnerabilities

2 known security issues reported for the Elfsight Contact Form WordPress plugin. Most recent disclosed Jun 9, 2025.

1 medium

Running Elfsight Contact Form on your site? Check whether your installed version is affected.

Scan your site free

Contact Us Form Plugin [elfsight-contact-form] <= 2.3.1 (unfixed)

unknown

[en] Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in elfsight elfsight Contact Form widget allows Retrieve Embedded Sensitive Data. This issue affects elfsight Contact Form widget: from n/a through 2.3.1.

Affected:
up to 2.3.1
Fix:
No patched version reported
Disclosed:
Jun 9, 2025

CVE-2025-31045 on NVD →

elfsight Contact Form widget <= 2.3.1 - Unauthenticated Information Exposure

medium

The elfsight Contact Form widget plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.3.1. This makes it possible for unauthenticated attackers to extract sensitive user or configuration data.

CVSS:
5.3
Affected:
up to 2.3.1
Fix:
No patched version reported
Disclosed:
Jun 4, 2025

CVE-2025-31045 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database