← All advisories

Medium severity6.5NVD Advisory· Published Jan 12, 2021· Updated Jun 17, 2026

CVE-2021-3133

CVE-2021-3133

Description

The Elementor Contact Form DB plugin before 1.6 for WordPress allows CSRF via backend admin pages.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

WordPress/Elementor Contact Form DBllm-create
Range: <1.6
WordPress/Elementor Contact Form DB plugindescription
Commentluv/Elementor Contact Form Db
cpe:2.3:a:sean-barton:elementor_contact_form_db:*:*:*:*:*:wordpress:*:*
Range: <1.6

Patches

Vulnerability mechanics

References

3

plugins.trac.wordpress.org/changeset/2454670/nvdPatchThird Party Advisory
advisory.checkmarx.net/advisory/CX-2020-4293nvdExploitThird Party Advisory
wordpress.org/plugins/sb-elementor-contact-form-db/nvdProductRelease NotesThird Party Advisory

News mentions

0

No linked articles in our index yet.