WordPress security by component

WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms

Plugin description

WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Mar 03, 2026; the highest CVE/CNA score is 7.2.

Plugin slug: wp-zendesk-for-contact-form-7-wpforms-elementor-formidable-and-ninja-forms

Latest vulnerability

CVE-2026-2568: WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms: Cross-site scripting

WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms is affected by cross-site scripting. The vulnerable path is reachable without authentication. Injected script can execute in the affected site's origin when the vulnerable output is viewed.

PublishedMar 03, 2026

Safe version guidanceSee mitigation notes

		Safe version
Mar 03, 2026	CVE-2026-2568 WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms: Cross-site scripting WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms is affected by cross-site scripting. The vulnerable path is reachable without authentication. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE7.2 NVDPending