Medium 5.4
2025-09-03< 1.6.2
CVE-2025-58639
Minimum safe version
1.6.2
Update to 1.6.2 or later to address 3 fixable vulnerabilities
CVE-2025-58639
WordPress Contact Form By Mega Forms – Drag and Drop Form Builder Plugin <= 1.1.2 is vulnerable to Cross Site Scripting (XSS)
CVE-2022-40191