CVE-2025-68046
Medium · 6.5CVSS
6.5
EPSS
0.4%
Published
Jan 22, 2026
CISA due date
—
The record
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in ThemeHunk Contact Form & Lead Form Elementor Builder lead-form-builder allows Retrieve Embedded Sensitive Data.This issue affects Contact Form & Lead Form Elementor Builder: from n/a through <= 2.0.1.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-109823 An attacker can read the name of filesystem paths of your application present via… CWE-497
- CVE-2026-111079 A flaw was found in Goose. CWE-497
- CVE-2026-111946 Plack::Middleware::ETag versions from 0.04 before 0.06 for Perl disclose file inode… CWE-497
- CVE-2026-96865 Exposure of sensitive system information to an unauthorized control sphere in Windows… CWE-497
- CVE-2026-85866 Exposure of sensitive system information to an unauthorized control sphere in Windows… CWE-497
- CVE-2026-83909 Exposure of sensitive system information to an unauthorized control sphere in Windows… CWE-497
- CVE-2026-83907 Exposure of sensitive system information to an unauthorized control sphere in Windows… CWE-497
- CVE-2026-83905 Exposure of sensitive system information to an unauthorized control sphere in Windows… CWE-497