ME
Product
MetForm
4
CVEs
0
On KEV
5.4
Max CVSS
3
New 30D
Severity mix
Critical 0High 0Medium 3Low 1
Watch
Add MetForm to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-86833 | 5.4 | Oct 7 | MetForm < 4.3.1 - Unauthenticated HTML Injection in Notification Emails via Field Shortcodes Affected: before 4.3.1 |
| CVE-2026-86832 | 5.3 | Oct 3 | MetForm < 4.3.1 - Unauthenticated Form Entry Data Disclosure via REST API Affected: before 4.3.1 |
| CVE-2026-86813 | 4.8 | Sep 11 | MetForm < 4.1.9 - Unauthenticated Email Header Injection via Notification Reply-To Affected: before 4.1.9 |
| CVE-2026-86834 | 3.7 | Oct 3 | MetForm 2.2.1 - 4.3.0 - Unauthenticated Debug File Disclosure via HubSpot Forms Integration Affected: 2.2.1 before 4.3.1 |
Showing 4