Sensitive Data Exposure in Elfsight Contact Form Widget by Elfsight
CVE-2025-31045

7.5HIGH

Key Information:

Vendor

WordPress
Status
Elfsight Contact Form Widget
Vendor
CVE Published:
9 June 2025

What is CVE-2025-31045?

The Elfsight Contact Form widget has a vulnerability that allows unauthorized access to sensitive system information. This flaw enables the retrieval of embedded sensitive data, potentially compromising user privacy and security. The issue affects all versions of the Elfsight Contact Form widget up to and including 2.3.1, making it imperative for users to assess their installation and implement necessary security measures.

Affected Version(s)

elfsight Contact Form widget <= 2.3.1

References

https://patchstack.com/database/wordpress/plugin/elfsight...
vdb-entry

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Tran Nguyen Bao Khanh (VCI - VNPT Cyber Immunity) (Patchstack Alliance)
.
CVE-2025-31045 : Sensitive Data Exposure in Elfsight Contact Form Widget by Elfsight