CVE-2025-62134: WordPress Contact Form Widget plugin <= 1.5.1 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery (CSRF) vulnerability in A WP Life Contact Form Widget allows Cross Site Request Forgery.This issue affects Contact Form Widget: from n/a through 1.5.1.
Other sources
Cross-Site Request Forgery (CSRF) vulnerability in A WP Life Contact Form Widget new-contact-form-widget allows Cross Site Request Forgery.This issue affects Contact Form Widget: from n/a through <= 1.5.1.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-62134?
CVE-2025-62134 has been classified as a medium severity Cross-Site Request Forgery (CSRF) vulnerability.
How do I fix CVE-2025-62134?
To fix CVE-2025-62134, it is recommended to update the Contact Form Widget to version 1.5.2 or later.
What impact does CVE-2025-62134 have on my website?
CVE-2025-62134 can allow attackers to exploit Cross-Site Request Forgery, potentially leading to unauthorized form submissions.
Which versions are affected by CVE-2025-62134?
CVE-2025-62134 affects Contact Form Widget versions from n/a up to and including 1.5.1.
Is there a workaround for CVE-2025-62134 if I cannot update?
If unable to update, you can disable the Contact Form Widget temporarily to mitigate the risk of exploitation from CVE-2025-62134.