How many wpdevart contact form builder CVEs are in CISA KEV?

None of wpdevart contact form builder's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for wpdevart contact form builder vulnerabilities?

Yes — 1 of wpdevart contact form builder's CVEs have a known public exploit.

Which versions of wpdevart contact form builder are affected?

2 distinct wpdevart contact form builder versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in wpdevart contact form builder CVEs?

wpdevart contact form builder's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).

What is the average severity of wpdevart contact form builder CVEs?

The average CVSS base score across wpdevart contact form builder's scored CVEs is 6.1.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

wpdevart

2 CVEs

wpdevart contact form builder Vulnerabilities

Name: wpdevart contact form builder vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for contact form builder by wpdevart.

2

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

1

Public exploits

PoC or exploit code

6.1

Avg CVSS

2023–2026

Last updated May 10, 2026

Overview

wpdevart contact form builder has 2 published CVE records since 2023, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 6.1.

This page aggregates every publicly disclosed vulnerability (CVE) affecting wpdevart contact form builder, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of wpdevart contact form builder's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High1

Medium1

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of wpdevart contact form builder's CVEs are currently listed in CISA's KEV catalog.

Public exploits

1

One of wpdevart contact form builder's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every wpdevart contact form builder version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

<= 2.1.61 CVE
>= 1.6.11 CVE

Find a version

2 CVEs

Sort

WordPress Contact Form Builder 1.6.1 Cross-Site Scripting via code_generator.php
CVE-2022-50959
Public exploit
CWE-79
Medium · CVSS 5.1
EPSS 0.2% (11th pct)2026-05-10
WordPress Contact Form Builder, Contact Widget Plugin <= 2.1.6 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-46075
Patch
CWE-79
High · CVSS 7.1
EPSS 0.3% (26th pct)2023-10-26

Common weakness types

The CWE weakness categories most often found in wpdevart contact form builder CVEs. Follow any weakness for its full explanation.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs

Disclosure activity by year

How many wpdevart contact form builder CVEs were published each year.

2023

1

2026

1

Other wpdevart products

Browse vulnerabilities for other products by wpdevart.

Booking calendar, Appointment Booking System12 CVEs booking calendar9 CVEs gallery7 CVEs Responsive Image Gallery, Gallery Album5 CVEs coming soon and maintenance mode4 CVEs Organization chart4 CVEs Gallery – Image and Video Gallery with Thumbnails3 CVEs pricing table builder3 CVEs

All wpdevart vulnerabilities

Frequently asked questions

Common questions about wpdevart contact form builder vulnerabilities.

How many CVEs does wpdevart contact form builder have?: wpdevart contact form builder has 2 published CVE records since 2023.
How many wpdevart contact form builder CVEs are in CISA KEV?: None of wpdevart contact form builder's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for wpdevart contact form builder vulnerabilities?: Yes — 1 of wpdevart contact form builder's CVEs have a known public exploit.
Which versions of wpdevart contact form builder are affected?: 2 distinct wpdevart contact form builder versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in wpdevart contact form builder CVEs?: wpdevart contact form builder's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).
What is the average severity of wpdevart contact form builder CVEs?: The average CVSS base score across wpdevart contact form builder's scored CVEs is 6.1.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track wpdevart contact form builder vulnerabilities

Monitor new wpdevart contact form builder vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing