Known vulnerabilities in the New Contact Form Widget plugin
4 security advisories have been published for the New Contact Form Widget plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- New Contact Form Widget - Cross-Site Request Forgery (CSRF) (CVE-2025-62134) MEDIUM
- New Contact Form Widget - Cross-Site Request Forgery (CSRF) (CVE-2025-47491) HIGH
- New Contact Form Widget - Cross-Site Request Forgery (CSRF) (CVE-2024-48037) MEDIUM
- New Contact Form Widget - SQL Injection (CVE-2019-17072) CRITICAL