Roxnor Metform vulnerabilities

• roxnor metform – contact form, survey, quiz, conditional forms, form templates & custom form builder for elementor MetForm <= 4.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'mf_form_id' Widget Setting CVE-2026-18100 6.4 MediumAugust 25, 2026
• roxnor metform – contact form, survey, quiz, & custom form builder for elementor MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor <= 4.1.0 - Unauthenticated Form Submission Exposure via Forgeable Cookie Value CVE-2026-0633 3.7 LowJanuary 24, 2026
• roxnor metform – contact form, survey, quiz, & custom form builder for elementor MetForm <= 4.0.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via `mf-template` DOM Element CVE-2025-5684 6.4 MediumJuly 29, 2025
• roxnor metform WordPress Metform Elementor Contact Form Builder plugin <= 3.9.7 - Server Side Request Forgery (SSRF) vulnerability CVE-2025-30914 4.4 MediumMarch 27, 2025
• roxnor metform, wpmet metform elementor contact form builder +1 more WordPress Metform Elementor Contact Form Builder plugin <= 3.4.0 - Broken Access Control vulnerability CVE-2023-50903 5.3 MediumDecember 9, 2024
• wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 more Metform Elementor Contact Form Builder <= 3.2.4 - Unauthenticated Double-Extension Arbitrary File Upload CVE-2023-0714 8.1 HighAugust 17, 2024
• roxnor metform – contact form, survey, quiz, & custom form builder for elementor, wpmet metform elementor contact form builder +1 more MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor <= 3.8.8 - Unauthenticated Sensitive Information Exposure CVE-2024-4266 5.3 MediumJune 11, 2024
• roxnor metform, wpmet metform elementor contact form builder +1 more WordPress MetForm plugin <= 3.8.3 - Broken Access Control vulnerability CVE-2024-33570 4.3 MediumMay 6, 2024
• wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 more Metform Elementor Contact Form Builder <= 3.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widgets CVE-2024-2791 6.4 MediumApril 2, 2024
• wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 more Metform Elementor Contact Form Builder <= 3.8.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2024-1585 6.4 MediumMarch 13, 2024
• wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 more Metform Elementor Contact Form Builder <= 3.8.1 - Cross-Site Request Forgery CVE-2023-6788 5.4 MediumJanuary 9, 2024
• wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 more Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via 'mf_first_name' shortcode CVE-2023-0689 4.3 MediumAugust 31, 2023
• wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 more Metform Elementor Contact Form Builder <= 3.3.2 - Cross-Site Request Forgery via permalink_setup CVE-2023-2517 5.4 MediumJuly 12, 2023
• wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 more Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via 'mf_payment_status' shortcode CVE-2023-0692 4.3 MediumJune 9, 2023
• wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 more Metform Elementor Contact Form Builder <= 3.3.0 - Unauthenticated CSV Injection CVE-2023-0721 8.3 HighJune 9, 2023
• wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 more Metform Elementor Contact Form Builder <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via mf_first_name shortcode CVE-2023-0708 5.4 MediumJune 9, 2023
• wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 more Metform Elementor Contact Form Builder <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via mf_thankyou shortcode CVE-2023-0710 4.9 MediumJune 9, 2023
• wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 more Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via mf_last_name shortcode CVE-2023-0691 4.3 MediumJune 9, 2023
• wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 more Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via mf_thankyou shortcode CVE-2023-0688 6.5 MediumJune 9, 2023
• wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 more Metform Elementor Contact Form Builder <= 3.3.0 - Missing Authorization CVE-2023-1843 6.5 MediumJune 9, 2023
• wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 more Metform Elementor Contact Form Builder <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via mf_last_name shortcode CVE-2023-0709 5.4 MediumJune 9, 2023
• wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 more Metform Elementor Contact Form Builder <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via mf shortcode CVE-2023-0695 5.4 MediumJune 9, 2023
• wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 more Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via mf shortcode CVE-2023-0694 6.5 MediumJune 9, 2023
• wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 more Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via 'mf_transaction_id' shortcode CVE-2023-0693 6.5 MediumJune 9, 2023
• wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 more Metform Elementor Contact Form Builder <= 3.1.2 - Unauthenticated Stored Cross-Site Scripting CVE-2023-0084 Public exploit EPSS 28.6% 7.2 HighMarch 2, 2023
• wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 more Metform Elementor Contact Form Builder <= 3.2.1 - reCaptcha Protection Bypass CVE-2023-0085 5.3 MediumMarch 2, 2023
• wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 more Metform Elementor Contact Form Builder <= 2.1.3 - Sensitive Information Disclosure CVE-2022-1442 Public exploit 7.5 HighMay 10, 2022