All 4 CVE vulnerabilities found in Lead Form Builder & Contact Form, with AI-generated Chinese analysis, references, and POCs.
Vendor: themehunk
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-1454 | Responsive Contact Form Builder & Lead Generation Plugin <= 2.0.1 - Unauthenticated Stored Cross-Site Scripting CWE-79 | 7.2 | High | 2026-03-11 |
| CVE-2024-4261 | Responsive Contact Form Builder & Lead Generation Plugin <= 1.9.1 - Authenticated (Subscriber+) Arbitrary Shortcode Execution CWE-94 | 5.4 | Medium | 2024-05-22 |
| CVE-2024-1415 | Responsive Contact Form Builder & Lead Generation Plugin <= 1.8.9 - Cross-Site Request Forgery CWE-352 | 4.3 | Medium | 2024-05-02 |
| CVE-2024-1416 | Responsive Contact Form Builder & Lead Generation Plugin <= 1.8.9 - Missing Authorization CWE-352 | 4.3 | Medium | 2024-05-02 |
All 4 known CVE vulnerabilities affecting Lead Form Builder & Contact Form with full Chinese analysis, references, and POCs where available.