CVE-2024-48037

Cross-Site Request Forgery (CSRF) vulnerability in A WP Life Contact Form Widget new-contact-form-widget allows Cross Site Request Forgery.This issue affects Contact Form Widget: from n/a through <= 1.4.2.

Score

CVSS 3.1 5.4 Medium

Status

Deferred - audit@patchstack.com

Published

2024-10-17

Last modified

2026-04-28

Weaknesses

CWE-352

Affected products

• Contact Form Widget (A Wp Life)

References

• https://patchstack.com/database/Wordpress/Plugin/new-contact-form-widget/vulnerability/wordpress-contact-form-widget-co…