PT-2026-4070 · WordPress · Themehunk Contact Form & Lead Form Elementor Builder

CVE-2025-68046 · Publicado 2026-01-22 · Atualizado 2026-01-23

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions ThemeHunk Contact Form & Lead Form Elementor Builder versions through 2.0.1

Description A flaw exists in ThemeHunk Contact Form & Lead Form Elementor Builder that could allow retrieval of embedded sensitive data. The issue is related to the exposure of sensitive system information to an unauthorized control sphere.

Recommendations Update ThemeHunk Contact Form & Lead Form Elementor Builder to a version later than 2.0.1.

Correção

Enumeração de Fraquezas

CWE-497

Identificadores relacionados

CVE-2025-68046

Produtos afetados

Themehunk Contact Form & Lead Form Elementor Builder

Referências · 3

• https://patchstack.com/database/Wordpress/Plugin/lead-form-builder/vulnerability/wordpress-contact-form-lead-form-elementor-builder-plugin-2-0-1-sensitive-data-exposure-vulnerability?_s_id=cve · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-68046 · Nota de Segurança
• https://twitter.com/CVEnew/status/2014707017978409144 · Publicação no Twitter