WordPress security by component
Elementor Contact Form DB
Plugin description
Elementor Contact Form DB stores submissions from Elementor contact forms in the WordPress database for later viewing.
Elementor Contact Form DB (sb-elementor-contact-form-db) is a WordPress plugin with 2 published CVE records in this archive. The latest tracked vulnerability was published Feb 19, 2026; the highest published CVSS base score is 6.5.
Plugin slug:
sb-elementor-contact-form-dbLatest vulnerability
CVE-2026-25320: Elementor Contact Form DB: A security weakness
Elementor Contact Form DB is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
| Safe version |
|
||
|---|---|---|---|
| Feb 19, 2026 |
CVE-2026-25320
Elementor Contact Form DB: A security weakness
Elementor Contact Form DB is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE5.3
|
| Jan 12, 2021 |
CVE-2021-3133
Sb Elementor Contact Form Db: Cross-site request forgery
Sb Elementor Contact Form Db is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
|
See mitigation notes |
CVEPending
|