WordPress plugin
Void Contact Form 7 Widget For Elementor Page Builder security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 4 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium4
- Low0
All Void Contact Form 7 Widget For Elementor Page Builder vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.4 | Authenticated (Author+) Stored Cross-Site Scripting ≤2.4.1Update to 2.4.2 | CVE-2024-43291 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting via cf7_redirect_page Attribute ≤2.4Update to 2.4.1 | CVE-2024-5419 | |
| Medium4.3 | Missing Authorization ≤2.3Update to 2.4 | CVE-2023-52214 | |
| Medium4.3 | Cross-Site Request Forgery in void_cf7_opt_in_user_data_track ≤2.1.1Update to 2.2 | CVE-2022-47166 |
- Medium6.4Authenticated (Author+) Stored Cross-Site Scripting
≤2.4.1Update to 2.4.2
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via cf7_redirect_page Attribute
≤2.4Update to 2.4.1
- Medium4.3Missing Authorization
≤2.3Update to 2.4
- Medium4.3Cross-Site Request Forgery in void_cf7_opt_in_user_data_track
≤2.1.1Update to 2.2
Void Contact Form 7 Widget For Elementor Page Builder: common questions
Does Void Contact Form 7 Widget For Elementor Page Builder have known vulnerabilities?
Yes. VulnCrest Radar lists 4 known vulnerabilities in Void Contact Form 7 Widget For Elementor Page Builder: 4 medium. None are known to affect version null.
How do I check which version of Void Contact Form 7 Widget For Elementor Page Builder I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Void Contact Form 7 Widget For Elementor Page Builder vulnerability?
CVE-2024-43291, published Aug 16, 2024: Void Contact Form 7 Widget For Elementor Page Builder <= 2.4.1 - Authenticated (Author+) Stored Cross-Site Scripting. Severity: Medium (CVSS 6.4).
Is any Void Contact Form 7 Widget For Elementor Page Builder vulnerability listed in CISA KEV?
No. None of the known Void Contact Form 7 Widget For Elementor Page Builder vulnerabilities is currently listed in the CISA KEV catalog.