Plugin icon

Lead Form Builder & Contact Form

lead-form-builder

Vulnerabilities:

12

Last Updated:

March 27, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2026-03-23
Title
Lead Form Builder & Contact Form < 2.0.2 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 2.0.2
CVSS
7.2 (high)
Published
2026-03-10
Title
Responsive Contact Form Builder & Lead Generation Plugin < 2.0.2 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 2.0.2
CVSS
7.2 (high)
Published
2026-01-20
Title
Contact Form & Lead Form Elementor Builder < 2.0.2 - Authenticated (Subscriber+) Information Exposure
Fixed in
Fixed in 2.0.2
CVSS
4.3 (medium)
Published
2024-10-23
Title
Lead Form Builder < 1.9.8 - Admin+ Stored XSS
Fixed in
Fixed in 1.9.8
CVSS
3.5 (low)
Published
2024-05-21
Title
Responsive Contact Form Builder & Lead Generation Plugin < 1.9.2 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
Fixed in
Fixed in 1.9.2
CVSS
5.4 (medium)
Published
2024-04-12
Title
Responsive Contact Form Builder & Lead Generation Plugin < 1.9.8 - Admin+ Stored XSS
Fixed in
Fixed in 1.9.8
CVSS
3.5 (low)
Published
2024-04-11
Title
Responsive Contact Form Builder & Lead Generation Plugin < 1.9.0 - Missing Authorization
Fixed in
Fixed in 1.9.0
CVSS
4.3 (medium)
Published
2024-04-11
Title
Responsive Contact Form Builder & Lead Generation Plugin < 1.9.0 - Cross-Site Request Forgery
Fixed in
Fixed in 1.9.0
CVSS
4.3 (medium)
Published
2022-02-01
Title
Contact Form & Lead Form Elementor Builder Plugin < 1.7.4 - Multiple Subscriber+ Settings Update
Fixed in
Fixed in 1.7.4
CVSS
5.4 (medium)
Published
2022-01-05
Title
Contact Form & Lead Form Elementor Builder < 1.7.0 - Multiple Admin+ Stored Cross-Site Scripting
Fixed in
Fixed in 1.7.0
CVSS
3.4 (low)
Published
2021-12-22
Title
Contact Form & Lead Form Elementor Builder < 1.6.8 - Subscriber+ Arbitrary Lead Deletion
Fixed in
Fixed in 1.6.8
CVSS
4.3 (medium)
Published
2021-11-29
Title
Contact Form & Lead Form Elementor Builder < 1.6.4 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 1.6.4
CVSS
8.8 (high)