Sb Elementor Contact Form Db Vulnerabilities

The FormsDB – Save Elementor Forms to Google Sheets & Post Type plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 2.1.3. This makes it possible for unauthenticated attackers to perform an unauthorized action.

CVSS:

5.3

Affected:

up to 2.1.3

Fixed in:

2.1.4

Disclosed:

Jan 28, 2026

CVE-2026-25320 on NVD →

The Contact Form DB - Elementor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'form_id' and 'form_name' parameters in versions up to, and including, 1.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary we...

CVSS:

6.1

Affected:

up to 1.7

Fixed in:

1.8.0

Disclosed:

Jul 19, 2022

CVE-2022-2116 on NVD →

The Elementor Contact Form DB plugin for WordPress is vulnerable to sensitive information disclosure due to a lack of capability checks on the sb_elem_cfd_download_csv() in versions up to, and including 1.5 which makes it possible for unauthenticated attackers to download an export file of the plugins saved contact ent...

CVSS:

5.3

Affected:

up to 1.5

Fixed in:

1.6

Disclosed:

Jun 1, 2022

The Elementor Contact Form DB plugin before 1.6 for WordPress allows CSRF via backend admin pages.

CVSS:

8.8

Affected:

up to 1.5

Fixed in:

1.6

Disclosed:

Jan 14, 2021

CVE-2021-3133 on NVD →