CVE-2023-50903

< 3.4.1

Missing Authorization vulnerability in Roxnor Metform allows Exploiting Incorrectly Configured Access Control Security Lev

5.3MEDIUM

CVE-2023-0714

< 3.3.0

The Metform Elementor Contact Form Builder for WordPress is vulnerable to Arbitrary File Upload due to insufficient file type vali

8.1HIGH

CVE-2024-4266

< 3.8.9

The MetForm - Contact Form, Survey, Quiz, & Custom Form Builder for Elementor plugin for WordPress is vulnerable to Sensitive Info

5.3MEDIUM

CVE-2024-33570

< 3.8.4

Missing Authorization vulnerability in Roxnor Metform metform.This issue affects Metform: from n/a through <= 3.8.3.

4.3MEDIUM

CVE-2024-2791

< 3.8.6

The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's widg

6.4MEDIUM

CVE-2024-1585

< 3.8.4

The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shor

6.4MEDIUM

CVE-2023-6788

<= 3.8.1

The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to,

5.4MEDIUM

CVE-2023-0689

< 3.3.2

The Metform Elementor Contact Form Builder for WordPress is vulnerable to Information Disclosure via the 'mf_first_name' shortcode

4.3MEDIUM

CVE-2023-2517

< 3.3.3

The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and

5.4MEDIUM

CVE-2023-1843

<= 3.3.0

The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to unauthorized permalink structure update due to a

6.5MEDIUM

CVE-2023-0721

<= 3.3.0

The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to CSV injection in versions up to, and including, 3

8.3HIGH

CVE-2023-0710

<= 3.3.0

The Metform Elementor Contact Form Builder for WordPress is vulnerable to Cross-Site Scripting by using the 'fname' attribute of t

4.9MEDIUM

CVE-2023-0709

<= 3.3.0

The Metform Elementor Contact Form Builder for WordPress is vulnerable to Cross-Site Scripting by using the 'mf_last_name' shortco

5.4MEDIUM

CVE-2023-0708

<= 3.3.0

The Metform Elementor Contact Form Builder for WordPress is vulnerable to Cross-Site Scripting by using the 'mf_first_name' shortc

5.4MEDIUM

CVE-2023-0695

<= 3.3.0

The Metform Elementor Contact Form Builder for WordPress is vulnerable to Cross-Site Scripting by using the 'mf' shortcode to echo

5.4MEDIUM

CVE-2023-0694

<= 3.3.1

The Metform Elementor Contact Form Builder for WordPress is vulnerable to Information Disclosure via the 'mf' shortcode in version

6.5MEDIUM

CVE-2023-0693

<= 3.3.1

The Metform Elementor Contact Form Builder for WordPress is vulnerable to Information Disclosure via the 'mf_transaction_id' short

6.5MEDIUM

CVE-2023-0692

<= 3.3.1

The Metform Elementor Contact Form Builder for WordPress is vulnerable to Information Disclosure via the 'mf_payment_status' short

4.3MEDIUM

CVE-2023-0691

<= 3.3.1

The Metform Elementor Contact Form Builder for WordPress is vulnerable to Information Disclosure via the 'mf_last_name' shortcode

4.3MEDIUM

CVE-2023-0688

<= 3.3.1

The Metform Elementor Contact Form Builder for WordPress is vulnerable to Information Disclosure via the 'mf_thankyou' shortcode i

6.5MEDIUM

CVE-2023-0084

<= 3.1.2

The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via text areas on for

7.2HIGH

CVE-2023-0085

<= 3.2.1

The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to reCaptcha Bypass in versions up to, and including

5.3MEDIUM

CVE-2022-1442

< 2.1.4

The Metform WordPress plugin is vulnerable to sensitive information disclosure due to improper access control in the ~/core/forms/

7.5HIGH