ME
Product
Metform Elementor Contact Form Builder
23
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 4Medium 17Low 0
Watch
Add Metform Elementor Contact Form Builder to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-50903 | 9.8 | Dec 9 | WordPress Metform Elementor Contact Form Builder plugin <= 3.4.0 - Broken Access Control vulnerability Affected: before 3.4.1 |
| CVE-2023-0714 | 9.8 | Aug 17 | Metform Elementor Contact Form Builder <= 3.2.4 - Unauthenticated Double-Extension Arbitrary File Upload Affected: before 3.3.0 |
| CVE-2024-33570 | 8.8 | May 6 | WordPress MetForm plugin <= 3.8.3 - Broken Access Control vulnerability Affected: before 3.8.4 |
| CVE-2023-0721 | 7.8 | Jun 9 | The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to CSV injection in versions up to, and including, 3.3.0 Affected: through 3.3.0 |
| CVE-2024-4266 | 7.5 | Jun 11 | MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor <= 3.8.8 - Unauthenticated Sensitive Information Exposure Affected: before 3.8.9 |
| CVE-2022-1442 | 7.5 | May 10 | The Metform WordPress plugin is vulnerable to sensitive information disclosure due to improper access control in the ~/core/forms/action.php file which can be exploited by an… Affected: before 2.1.4 |
| CVE-2023-0688 | 6.5 | Jun 9 | The Metform Elementor Contact Form Builder for WordPress is vulnerable to Information Disclosure via the 'mf_thankyou' shortcode in versions up to, and including, 3.3.1 Affected: through 3.3.1 |
| CVE-2023-0084 | 6.1 | Mar 2 | The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via text areas on forms in versions up to, and including, 3.1.2 due to… Affected: through 3.1.2 |
| CVE-2024-2791 | 5.4 | Apr 2 | Metform Elementor Contact Form Builder <= 3.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widgets Affected: before 3.8.6 |
| CVE-2024-1585 | 5.4 | Mar 13 | Metform Elementor Contact Form Builder <= 3.8.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode Affected: before 3.8.4 |
| CVE-2023-6788 | 5.4 | Jan 9 | The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.8.1 Affected: through 3.8.1 |
| CVE-2023-0710 | 5.4 | Jun 9 | The Metform Elementor Contact Form Builder for WordPress is vulnerable to Cross-Site Scripting by using the 'fname' attribute of the 'mf_thankyou' shortcode to echo unescaped form… Affected: through 3.3.0 |
| CVE-2023-0709 | 5.4 | Jun 9 | The Metform Elementor Contact Form Builder for WordPress is vulnerable to Cross-Site Scripting by using the 'mf_last_name' shortcode to echo unescaped form submissions in versions… Affected: through 3.3.0 |
| CVE-2023-0708 | 5.4 | Jun 9 | The Metform Elementor Contact Form Builder for WordPress is vulnerable to Cross-Site Scripting by using the 'mf_first_name' shortcode to echo unescaped form submissions in… Affected: through 3.3.0 |
| CVE-2023-0695 | 5.4 | Jun 9 | The Metform Elementor Contact Form Builder for WordPress is vulnerable to Cross-Site Scripting by using the 'mf' shortcode to echo unescaped form submissions in versions up to,… Affected: through 3.3.0 |
| CVE-2023-1843 | 5.3 | Jun 9 | The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to unauthorized permalink structure update due to a missing capability check on the permalink_setup… Affected: through 3.3.0 |
| CVE-2023-0085 | 5.3 | Mar 2 | The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to reCaptcha Bypass in versions up to, and including, 3.2.1 Affected: through 3.2.1 |
| CVE-2023-0689 | 4.3 | Aug 31 | The Metform Elementor Contact Form Builder for WordPress is vulnerable to Information Disclosure via the 'mf_first_name' shortcode in versions up to, and including, 3.3.1 Affected: before 3.3.2 |
| CVE-2023-2517 | 4.3 | Jul 12 | The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.3.2 Affected: before 3.3.3 |
| CVE-2023-0694 | 4.3 | Jun 9 | The Metform Elementor Contact Form Builder for WordPress is vulnerable to Information Disclosure via the 'mf' shortcode in versions up to, and including, 3.3.1 Affected: through 3.3.1 |
| CVE-2023-0693 | 4.3 | Jun 9 | The Metform Elementor Contact Form Builder for WordPress is vulnerable to Information Disclosure via the 'mf_transaction_id' shortcode in versions up to, and including, 3.3.1 Affected: through 3.3.1 |
| CVE-2023-0692 | 4.3 | Jun 9 | The Metform Elementor Contact Form Builder for WordPress is vulnerable to Information Disclosure via the 'mf_payment_status' shortcode in versions up to, and including, 3.3.1 Affected: through 3.3.1 |
| CVE-2023-0691 | 4.3 | Jun 9 | The Metform Elementor Contact Form Builder for WordPress is vulnerable to Information Disclosure via the 'mf_last_name' shortcode in versions up to, and including, 3.3.1 Affected: through 3.3.1 |
Showing 23