Void Contact Form 7 Widget For Elementor Page Builder

void_contact_form_7_widget_for_elementor_page_builder

Vendor: Voidcoders • 4 CVEs

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-43291 1Voidcoders 1Void Contact Form 7 Widget For Elementor Page Builder Jun 17, 2026 Aug 18, 2024 N/A· v4 4.8 MEDIUM· v3 N/A· v2 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in voidCoders Void Contact Form 7 Widget For Elementor Page Builder allows Stored XSS.This issue affects Void Cont...Show more Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in voidCoders Void Contact Form 7 Widget For Elementor Page Builder allows Stored XSS.This issue affects Void Contact Form 7 Widget For Elementor Page Builder: from n/a through 2.4.1.Show less
CVE-2024-5419 1Voidcoders 1Void Contact Form 7 Widget For Elementor Page Builder Jun 17, 2026 Jul 2, 2024 N/A· v4 5.4 MEDIUM· v3 N/A· v2 The Void Contact Form 7 Widget For Elementor Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cf7_redirect_page' attribute within the plugin's Void Contact From 7 widget in all vers...Show more The Void Contact Form 7 Widget For Elementor Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cf7_redirect_page' attribute within the plugin's Void Contact From 7 widget in all versions up to, and including, 2.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.Show less
CVE-2023-52214 1Voidcoders 1Void Contact Form 7 Widget For Elementor Page Builder Jun 17, 2026 Mar 26, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Missing Authorization vulnerability in voidCoders Void Contact Form 7 Widget For Elementor Page Builder.This issue affects Void Contact Form 7 Widget For Elementor Page Builder: from n/a through 2.3.
CVE-2022-47166 1Voidcoders 1Void Contact Form 7 Widget For Elementor Page Builder Jun 17, 2026 Mar 13, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Cross-Site Request Forgery (CSRF) vulnerability in voidCoders Void Contact Form 7 Widget For Elementor Page Builder plugin <= 2.1.1 versions.