Wpmet Metform vulnerabilities

• wpmet metform WordPress Metform plugin <= 4.3.3 - Broken Access Control vulnerability CVE-2026-120847 4.3 MediumNovember 7, 2026
• wpmet metform WordPress Metform plugin <= 4.3.2 - Broken Access Control vulnerability CVE-2026-114180 5.3 MediumOctober 22, 2026
• wpmet metform WordPress Metform plugin <= 4.3.0 - Cross Site Scripting (XSS) vulnerability CVE-2026-103339 6.5 MediumOctober 1, 2026
• wpmet metform pro WordPress MetForm Pro plugin <= 3.9.1 - Broken Access Control vulnerability CVE-2026-24611 9.1 CriticalJune 17, 2026
• wpmet metform pro WordPress MetForm Pro plugin <= 3.9.1 - Broken Access Control vulnerability CVE-2026-24610 4.3 MediumJune 17, 2026
• wpmet metform pro MetForm Pro <= 3.9.7 - Unauthenticated Payment Amount Manipulation via 'mf-calculation' CVE-2026-1782 5.3 MediumApril 15, 2026
• wpmet metform pro MetForm Pro <= 3.9.6 - Unauthenticated Stored Cross-Site Scripting CVE-2026-1261 7.2 HighMarch 10, 2026
• roxnor metform, wpmet metform elementor contact form builder +1 more WordPress Metform Elementor Contact Form Builder plugin <= 3.4.0 - Broken Access Control vulnerability CVE-2023-50903 5.3 MediumDecember 9, 2024
• wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 more Metform Elementor Contact Form Builder <= 3.2.4 - Unauthenticated Double-Extension Arbitrary File Upload CVE-2023-0714 8.1 HighAugust 17, 2024
• roxnor metform – contact form, survey, quiz, & custom form builder for elementor, wpmet metform elementor contact form builder +1 more MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor <= 3.8.8 - Unauthenticated Sensitive Information Exposure CVE-2024-4266 5.3 MediumJune 11, 2024
• roxnor metform, wpmet metform elementor contact form builder +1 more WordPress MetForm plugin <= 3.8.3 - Broken Access Control vulnerability CVE-2024-33570 4.3 MediumMay 6, 2024
• wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 more Metform Elementor Contact Form Builder <= 3.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widgets CVE-2024-2791 6.4 MediumApril 2, 2024
• wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 more Metform Elementor Contact Form Builder <= 3.8.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2024-1585 6.4 MediumMarch 13, 2024
• wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 more Metform Elementor Contact Form Builder <= 3.8.1 - Cross-Site Request Forgery CVE-2023-6788 5.4 MediumJanuary 9, 2024
• wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 more Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via 'mf_first_name' shortcode CVE-2023-0689 4.3 MediumAugust 31, 2023
• wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 more Metform Elementor Contact Form Builder <= 3.3.2 - Cross-Site Request Forgery via permalink_setup CVE-2023-2517 5.4 MediumJuly 12, 2023
• wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 more Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via 'mf_payment_status' shortcode CVE-2023-0692 4.3 MediumJune 9, 2023
• wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 more Metform Elementor Contact Form Builder <= 3.3.0 - Unauthenticated CSV Injection CVE-2023-0721 8.3 HighJune 9, 2023
• wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 more Metform Elementor Contact Form Builder <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via mf_first_name shortcode CVE-2023-0708 5.4 MediumJune 9, 2023
• wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 more Metform Elementor Contact Form Builder <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via mf_thankyou shortcode CVE-2023-0710 4.9 MediumJune 9, 2023
• wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 more Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via mf_last_name shortcode CVE-2023-0691 4.3 MediumJune 9, 2023
• wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 more Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via mf_thankyou shortcode CVE-2023-0688 6.5 MediumJune 9, 2023
• wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 more Metform Elementor Contact Form Builder <= 3.3.0 - Missing Authorization CVE-2023-1843 6.5 MediumJune 9, 2023
• wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 more Metform Elementor Contact Form Builder <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via mf_last_name shortcode CVE-2023-0709 5.4 MediumJune 9, 2023
• wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 more Metform Elementor Contact Form Builder <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via mf shortcode CVE-2023-0695 5.4 MediumJune 9, 2023
• wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 more Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via mf shortcode CVE-2023-0694 6.5 MediumJune 9, 2023
• wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 more Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via 'mf_transaction_id' shortcode CVE-2023-0693 6.5 MediumJune 9, 2023
• wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 more Metform Elementor Contact Form Builder <= 3.1.2 - Unauthenticated Stored Cross-Site Scripting CVE-2023-0084 Public exploit EPSS 28.6% 7.2 HighMarch 2, 2023
• wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 more Metform Elementor Contact Form Builder <= 3.2.1 - reCaptcha Protection Bypass CVE-2023-0085 5.3 MediumMarch 2, 2023
• wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 more Metform Elementor Contact Form Builder <= 2.1.3 - Sensitive Information Disclosure CVE-2022-1442 Public exploit 7.5 HighMay 10, 2022