PT-2026-4070 · WordPress · Themehunk Contact Form & Lead Form Elementor Builder

Published 2026-01-22 · Updated 2026-01-23 · CVE-2025-68046

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions ThemeHunk Contact Form & Lead Form Elementor Builder versions through 2.0.1

Description A flaw exists in ThemeHunk Contact Form & Lead Form Elementor Builder that could allow retrieval of embedded sensitive data. The issue is related to the exposure of sensitive system information to an unauthorized control sphere.

Recommendations Update ThemeHunk Contact Form & Lead Form Elementor Builder to a version later than 2.0.1.

Fix

Weakness Enumeration

CWE-497

Related Identifiers

CVE-2025-68046

Affected Products

Themehunk Contact Form & Lead Form Elementor Builder

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-68046 · Security Note
• https://patchstack.com/database/Wordpress/Plugin/lead-form-builder/vulnerability/wordpress-contact-form-lead-form-elementor-builder-plugin-2-0-1-sensitive-data-exposure-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/2014707017978409144 · Twitter Post