Where
-Infinity
0

Trending

Last week
Last month
Last year

Wpmet Metform Elementor Contact Form Builder WordpressWordPress Metform Elementor Contact Form Builder plugin <= 3.4.0 - Broken Access Control vulnerability

Risk 86
Severity
9.8
First published (updated )
CVE-2023-50903

Metform Elementor Contact Form BuilderMetform Elementor Contact Form Builder <= 3.2.4 - Unauthenticated Double-Extension Arbitrary File Upload

Risk 86
Severity
9.8
First published (updated )
CVE-2023-0714

MetForm Contact Form, Survey, Quiz, & Custom Form Builder for ElementorMetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor <= 3.8.8 - Unauthenticated Sensitive Information Exposure

Risk 31
Severity
7.5
EPSS
0.05%
First published (updated )
CVE-2024-4266

Wpmet Metform Elementor Contact Form Builder WordpressWordPress MetForm plugin <= 3.8.3 - Broken Access Control vulnerability

Risk 56
Severity
8.8
EPSS
0.04%
First published (updated )
CVE-2024-33570

Metform Elementor Contact Form BuilderMetform Elementor Contact Form Builder <= 3.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widgets

Risk 39
Severity
6.4
First published (updated )
CVE-2024-2791
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Metform Elementor Contact Form BuilderMetform Elementor Contact Form Builder <= 3.8.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode

Risk 39
Severity
6.4
First published (updated )
CVE-2024-1585

Wpmet Metform Elementor Contact Form Builder WordpressMetform Elementor Contact Form Builder <= 3.8.1 - Cross-Site Request Forgery

Risk 24
Severity
5.4
EPSS
0.07%
First published (updated )
CVE-2023-6788

Wpmet Metform Elementor Contact Form Builder WordpressMetform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via 'mf_first_name' shortcode

Risk 22
Severity
4.3
First published (updated )
CVE-2023-0689

Wpmet Metform Elementor Contact Form Builder WordpressMetform Elementor Contact Form Builder <= 3.3.2 - Cross-Site Request Forgery via permalink_setup

Risk 34
Severity
5.4
First published (updated )
CVE-2023-2517

Wpmet Metform Elementor Contact Form Builder WordpressMetform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via 'mf_payment_status' shortcode

Risk 23
Severity
4.3
First published (updated )
CVE-2023-0692
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Wpmet Metform Elementor Contact Form Builder WordpressMetform Elementor Contact Form Builder <= 3.3.0 - Unauthenticated CSV Injection

Risk 71
Severity
8.3
First published (updated )
CVE-2023-0721

Wpmet Metform Elementor Contact Form Builder WordpressMetform Elementor Contact Form Builder <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via mf_first_name shortcode

Risk 34
Severity
5.4
First published (updated )
CVE-2023-0708

Wpmet Metform Elementor Contact Form Builder WordpressMetform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via mf_last_name shortcode

Risk 23
Severity
4.3
First published (updated )
CVE-2023-0691

Wpmet Metform Elementor Contact Form Builder WordpressMetform Elementor Contact Form Builder <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via mf_thankyou shortcode

Risk 34
Severity
5.4
First published (updated )
CVE-2023-0710

Wpmet Metform Elementor Contact Form Builder WordpressMetform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via mf_thankyou shortcode

Risk 39
Severity
6.5
First published (updated )
CVE-2023-0688
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Wpmet Metform Elementor Contact Form Builder WordpressMetform Elementor Contact Form Builder <= 3.3.0 - Missing Authorization

Risk 40
Severity
6.5
First published (updated )
CVE-2023-1843

Wpmet Metform Elementor Contact Form Builder WordpressMetform Elementor Contact Form Builder <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via mf_last_name shortcode

Risk 34
Severity
5.4
First published (updated )
CVE-2023-0709

Wpmet Metform Elementor Contact Form Builder WordpressMetform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via mf shortcode

Risk 39
Severity
6.5
First published (updated )
CVE-2023-0694

Wpmet Metform Elementor Contact Form Builder WordpressMetform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via 'mf_transaction_id' shortcode

Risk 38
Severity
6.5
First published (updated )
CVE-2023-0693

Wpmet Metform Elementor Contact Form Builder WordpressMetform Elementor Contact Form Builder <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via mf shortcode

Risk 34
Severity
5.4
First published (updated )
CVE-2023-0695
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Wpmet Metform Elementor Contact Form Builder WordpressMetform Elementor Contact Form Builder <= 3.1.2 - Unauthenticated Stored Cross-Site Scripting

Risk 44
Severity
7.2
First published (updated )
CVE-2023-0084

Wpmet Metform Elementor Contact Form Builder WordpressMetform Elementor Contact Form Builder <= 3.2.1 - reCaptcha Protection Bypass

Risk 27
Severity
5.3
First published (updated )
CVE-2023-0085

Wpmet Metform Elementor Contact Form Builder WordpressMetform Elementor Contact Form Builder <= 2.1.3 - Sensitive Information Disclosure

Risk 43
Severity
7.5
First published (updated )
CVE-2022-1442

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203