Lead Form Builder & Contact Form

Vulnerabilities 14Slug lead-form-builderLatest version 2.1.3WordPress.org →

Minimum safe version

2.0.2

Update to 2.0.2 or later to address 14 fixable vulnerabilities

Latest available2.1.3 ✓
N/A
2026-03-10< 2.0.2

Responsive Contact Form Builder & Lead Generation Plugin <= 2.0.1 - Unauthenticated Stored Cross-Site Scripting

WordfenceCVE
Medium 4.8
2025-05-17< 1.9.8

WordPress Contact Form & Lead Form Elementor Builder Plugin < 1.9.8 is vulnerable to Cross Site Scripting (XSS)

PatchstackCVEEUVDWordfence
Medium 5.4
2024-05-23< 1.9.2

WordPress Contact Form & Lead Form Elementor Builder Plugin <= 1.9.1 is vulnerable to Content Injection

PatchstackCVEWordfence
N/A
2023-06-27< 1.8.5

WordPress Contact Form & Lead Form Elementor Builder Plugin <= 1.8.4 is vulnerable to Broken Access Control

PatchstackWordfenceCVE
N/A
< 1.6.8

Contact Form &amp; Lead Form Elementor Builder &lt; 1.6.8 - Subscriber+ Arbitrary Lead Deletion

WPScan
N/A
2021-12-22< 1.6.8

WordPress Contact Form & Lead Form Elementor Builder plugin <= 1.6.7 - Arbitrary Lead Deletion vulnerability

Patchstack