Contact Form vCard Generator

Contact Form vCard Generator has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2025 and 2026; none of them are fixed as of September 2026. Their average CVSS score is 6.2, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high. 2025 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (67%). Other recurring categories include Missing Authorization.

None of the 3 issues recorded for Contact Form vCard Generator have a published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

3 independent researchers contributed these findings, one record each.

01234567891002.04.2025Today02.04.20257.2Contact Form vCard Generator <= 2.4 - Unauthenticated Stored Cross-Site Scripting CVSS 7.2 · 02.04.202517.04.20256.1Contact Form vCard Generator <= 2.4 - Reflected Cross-Site Scripting CVSS 6.1 · 17.04.202508.01.20265.3Contact Form vCard Generator <= 2.4 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'wp-gvc-cf-download-id' Parameter CVSS 5.3 · 08.01.2026

Strategic Overview

Avg CVSSMedium
6.2/ 10
Patch Coverage0%
Open

3

Fixed

0

Get automatic notifications for all Contact Form vCard Generator vulnerabilities before they are exploited.

Most severe open issueCVSS 7.2CVE-2025-31582

Contact Form vCard Generator <= 2.4 - Unauthenticated Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

3 records
Showing 1–3 of 3 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C