Wpmet vulnerabilities

Products

• Metform Elementor Contact Form Builder 23
• Elements Kit Elementor Addons 14
• Elementskit Pro 10
• Elementskit 9
• Elementskit Elementor Addons 7
• Wp Ultimate Review 7
• Wp Ultimate Review 6
• Elementskit Elementor Addons Lite 4
• Metform Pro 4
• Wp Social Login And Register Social Counter 3
• Fundengine 2
• Gutenkit 2
• Metform 2
• Wp Fundraising Donation And Crowdfunding Platform 2

Newest

• wpmet metform WordPress Metform plugin <= 4.3.2 - Broken Access Control vulnerability CVE-2026-114180 5.3 MediumOctober 22, 2026
• wpmet metform WordPress Metform plugin <= 4.3.0 - Cross Site Scripting (XSS) vulnerability CVE-2026-103339 6.5 MediumOctober 1, 2026
• roxnor elementskit elementor addons lite WordPress ElementsKit Elementor addons Lite plugin <= 4.0.6 - Cross Site Scripting (XSS) vulnerability CVE-2026-103063 6.5 MediumOctober 1, 2026
• roxnor elementskit elementor addons lite WordPress ElementsKit Elementor addons Lite plugin <= 4.0.6 - Cross Site Scripting (XSS) vulnerability CVE-2026-103064 6.5 MediumOctober 1, 2026
• wpmet elementskit pro ElementsKit Pro <= 4.10.1 - Unauthenticated Stored Cross-Site Scripting via 's' Parameter CVE-2026-4246 6.1 MediumAugust 28, 2026
• wpmet metform pro WordPress MetForm Pro plugin <= 3.9.1 - Broken Access Control vulnerability CVE-2026-24611 9.1 CriticalJune 17, 2026
• wpmet metform pro WordPress MetForm Pro plugin <= 3.9.1 - Broken Access Control vulnerability CVE-2026-24610 4.3 MediumJune 17, 2026
• roxnor getgenie WordPress GetGenie plugin <= 4.4.1 - Sensitive Data Exposure vulnerability CVE-2026-54197 6.5 MediumJune 16, 2026
• roxnor elementskit elementor addons lite WordPress ElementsKit Elementor addons Lite plugin <= 3.9.6 - Broken Access Control vulnerability CVE-2026-49053 5.3 MediumMay 27, 2026
• roxnor elementskit elementor addons lite WordPress ElementsKit Elementor addons Lite plugin <= 3.9.6 - Broken Access Control vulnerability CVE-2026-49052 4.3 MediumMay 27, 2026
• wpmet metform pro MetForm Pro <= 3.9.7 - Unauthenticated Payment Amount Manipulation via 'mf-calculation' CVE-2026-1782 5.3 MediumApril 15, 2026
• wpmet metform pro MetForm Pro <= 3.9.6 - Unauthenticated Stored Cross-Site Scripting CVE-2026-1261 7.2 HighMarch 10, 2026
• wpmet elementskit elementor addons, roxnor elementskit elementor addons – advanced widgets & templates addons for elementor +1 more ElementsKit Elementor Addons and Templates <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Widget CVE-2025-3614 6.4 MediumJuly 24, 2025
• wpmet elementskit elementor addons, roxnor elementskit elementor addons – advanced widgets & templates addons for elementor +1 more ElementsKit Lite <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison Widget CVE-2025-4479 6.4 MediumJune 19, 2025
• ataur r gutenkit WordPress GutenKit plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability CVE-2025-46253 6.5 MediumApril 22, 2025
• wpmet elementskit elementor addons, roxnor elementskit elementor addons – advanced widgets & templates addons for elementor +1 more ElementsKit Elementor addons <= 3.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-11180 6.4 MediumMarch 29, 2025
• roxnor wp social login and register social counter Wp Social Login and Register Social Counter <= 3.1.0 - Cross-Site Request Forgery to Settings Update CVE-2025-1506 4.3 MediumFebruary 28, 2025
• wpmet elementskit elementor addons, roxnor elementskit elementor addons – advanced widgets & templates addons for elementor +1 more ElementsKit Elementor addons <= 3.4.0 - Unauthenticated Information Exposure via get_megamenu_content Function CVE-2025-0968 5.3 MediumFebruary 19, 2025
• wpmet elementskit elementor addons, roxnor elementskit elementor addons – advanced widgets & templates addons for elementor +1 more ElementsKit Elementor addons <= 3.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion Widget CVE-2025-1005 6.4 MediumFebruary 15, 2025
• wpmet elementskit, elementskit pro +1 more ElementsKit Pro <= 3.7.8 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via url Parameter CVE-2025-0321 6.4 MediumJanuary 28, 2025
• roxnor metform, wpmet metform elementor contact form builder +1 more WordPress Metform Elementor Contact Form Builder plugin <= 3.4.0 - Broken Access Control vulnerability CVE-2023-50903 5.3 MediumDecember 9, 2024
• roxnor elementskit elementor addons lite, wpmet elements kit elementor addons +1 more WordPress ElementsKit Lite plugin <= 3.1.4 - Unauthenticated Broken Access Control vulnerability CVE-2024-37255 5.3 MediumNovember 1, 2024
• roxnor elementskit elementor addons – advanced widgets & templates addons for elementor, wpmet elements kit elementor addons +1 more ElementsKit Elementor addons <= 3.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison Widget CVE-2024-10091 6.4 MediumOctober 26, 2024
• ataurr gutenkit – page builder blocks, patterns, and templates for gutenberg block editor, wpmet gutenkit +1 more GutenKit <= 2.1.0 - Unauthenticated Arbitrary File Upload CVE-2024-9234 Public exploit EPSS 10.4% 9.8 CriticalOctober 11, 2024
• wpmet elementskit elementor addons, roxnor elementskit elementor addons – advanced widgets & templates addons for elementor +1 more ElementsKit Elementor addons <= 3.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Widget CVE-2024-8546 6.4 MediumSeptember 25, 2024
• elementskit pro, wpmet elementskit, elementskit pro +2 more WordPress ElementsKit Pro plugin <= 3.6.0 - Local File Inclusion vulnerability CVE-2024-43996 6.5 MediumSeptember 23, 2024
• wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 more Metform Elementor Contact Form Builder <= 3.2.4 - Unauthenticated Double-Extension Arbitrary File Upload CVE-2023-0714 8.1 HighAugust 17, 2024
• wpmet elementskit, elementskit pro +1 more ElementsKit Pro <= 3.6.6 - Authenticated (Contributor+) Sensitive Information Exposure CVE-2024-7063 4.3 MediumAugust 15, 2024
• wpmet elementskit, elementskit pro +1 more ElementsKit Pro <= 3.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-7064 6.4 MediumAugust 15, 2024
• roxnor fundengine – donation and crowdfunding platform, wpmet fundengine, wp fundraising donation and crowdfunding platform +2 more FundEngine – Donation and Crowdfunding Platform <= 1.7.0 - Authenticated (Subscriber+) Privilege Escalation CVE-2024-6698 8.8 HighAugust 1, 2024
• roxnor elementskit elementor addons – advanced widgets & templates addons for elementor, wpmet elements kit elementor addons +1 more ElementsKit Elementor addons <= 3.2.0 - Unauthenticated Information Exposure via ekit_widgetarea_content Function CVE-2024-6455 5.3 MediumJuly 18, 2024
• wpmet elements kit elementor addons WordPress ElementsKit Lite plugin <= 2.9.0 - Broken Access Control vulnerability CVE-2023-39993 4.3 MediumJune 19, 2024
• wpmet elementskit, elementskit pro +1 more ElementsKit Elementor addons and Templates Library <= 3.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Motion Text and Table Widgets CVE-2024-5263 6.4 MediumJune 15, 2024
• wpmet elementskit, elementskit pro +1 more ElementsKit PRO <= 3.6.1 - Authenticated (Contributor+) Server-Side Request Forgery CVE-2024-4404 8.5 HighJune 14, 2024
• wpmet wp fundraising donation and crowdfunding platform WordPress FundEngine – Donation and Crowdfunding Platform plugin <= 1.6.4 - Broken Access Control vulnerability CVE-2024-34758 5.3 MediumJune 11, 2024
• roxnor metform – contact form, survey, quiz, & custom form builder for elementor, wpmet metform elementor contact form builder +1 more MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor <= 3.8.8 - Unauthenticated Sensitive Information Exposure CVE-2024-4266 5.3 MediumJune 11, 2024
• wpmet elementskit, elementskit pro +1 more ElementsKit Pro <= 3.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-4452 6.4 MediumMay 21, 2024
• roxnor wp ultimate review WordPress WP Ultimate Review plugin <= 2.2.5 - Review Score Manipulation vulnerability CVE-2024-32685 5.3 MediumMay 17, 2024
• roxnor wp ultimate review WordPress Wp Ultimate Review plugin <= 2.3.6 - IP limit Bypass vulnerability CVE-2024-21746 5.3 MediumMay 17, 2024
• roxnor metform, wpmet metform elementor contact form builder +1 more WordPress MetForm plugin <= 3.8.3 - Broken Access Control vulnerability CVE-2024-33570 4.3 MediumMay 6, 2024
• wpmet elementskit, elementskit pro +1 more ElementsKit Pro <= 3.6.0 - Authenticated (Contributor+) Local File Inclusion via Price Menu, Hotspot, and Advanced Toggle Widgets CVE-2024-3500 8.8 HighMay 2, 2024
• wpmet elements kit elementor addons, xpeedstudio elementskit elementor addons and templates library +1 more The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site... CVE-2024-3650 6.4 MediumMay 2, 2024
• roxnor elementskit elementor addons – advanced widgets & templates addons for elementor, wpmet elements kit elementor addons +1 more ElementsKit Elementor addons <= 3.1.0 - Authenticated (Contributor+) Local File Inclusion via Onepage Scroll Module CVE-2024-3499 8.8 HighMay 2, 2024
• roxnor wp ultimate review WordPress WP Ultimate Review plugin <= 2.2.5 - Broken Access Control on Review vulnerability CVE-2024-32684 5.3 MediumApril 22, 2024
• roxnor wp ultimate review WordPress WP Ultimate Review plugin <= 2.2.5 - Insecure Direct Object References (IDOR) vulnerability CVE-2024-32683 5.3 MediumApril 19, 2024
• wpmet elementskit, elementskit pro +1 more ElementsKit Pro <= 3.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'ekit_btn_id' CVE-2024-3598 6.4 MediumApril 19, 2024
• roxnor elementskit elementor addons lite, wpmet elements kit elementor addons +1 more WordPress ElementsKit Elementor addons plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability CVE-2024-32505 6.5 MediumApril 17, 2024
• roxnor elementskit elementor addons – advanced widgets & templates addons for elementor, wpmet elements kit elementor addons +1 more ElementsKit Elementor addons <= 3.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget CVE-2024-2803 6.4 MediumApril 4, 2024
• wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 more Metform Elementor Contact Form Builder <= 3.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widgets CVE-2024-2791 6.4 MediumApril 2, 2024
• roxnor elementskit elementor addons – advanced widgets & templates addons for elementor, wpmet elements kit elementor addons +1 more ElementsKit Elementor addons <= 3.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-1238 6.4 MediumMarch 30, 2024
• Show olderLoading…