Login Request a demo
WP
Vendor
Wpmet
15 products with CVEs on record
88
CVEs
0
On KEV
4
New 30D
Products
EE
ElementsKit Elementor addons Lite
Wpmet
6.5
4 CVEs0 on KEV2 new
ME
Metform
Wpmet
6.5
2 CVEs0 on KEV2 new
ME
Metform Elementor Contact Form Builder
Wpmet
9.8
23 CVEs0 on KEV0 new
EK
Elements kit Elementor addons
Wpmet
8.8
14 CVEs0 on KEV0 new
EL
Elementskit
Wpmet
9.6
9 CVEs0 on KEV0 new
EE
Elementskit Elementor Addons
Wpmet
5.4
7 CVEs0 on KEV0 new
EP
ElementsKit Pro
wpmet
9.6
7 CVEs0 on KEV0 new
WU
WP Ultimate Review
Wpmet
8.8
7 CVEs0 on KEV0 new
MP
MetForm Pro
Wpmet
9.1
4 CVEs0 on KEV0 new
WS
WP Social Login And Register Social Counter
Wpmet
6.5
3 CVEs0 on KEV0 new
FU
Fundengine
Wpmet
9.8
2 CVEs0 on KEV0 new
GU
Gutenkit
Wpmet
9.8
2 CVEs0 on KEV0 new
WF
WP Fundraising Donation and Crowdfunding Platform
Wpmet
8.8
2 CVEs0 on KEV0 new
GE
GetGenie
Wpmet
6.5
1 CVEs0 on KEV0 new
SH
Shopengine
Wpmet
8.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-114180
ME
Metform
Wpmet
5.3
0%
Oct 22WordPress Metform plugin <= 4.3.2 - Broken Access Control vulnerability
CVE-2026-103339
ME
Metform
Wpmet
6.5
0%
Oct 1WordPress Metform plugin <= 4.3.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-103063
EE
ElementsKit Elementor addons Lite
Wpmet
6.5
0%
Oct 1WordPress ElementsKit Elementor addons Lite plugin <= 4.0.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-103064
EE
ElementsKit Elementor addons Lite
Wpmet
6.5
0%
Oct 1WordPress ElementsKit Elementor addons Lite plugin <= 4.0.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-4246
EP
ElementsKit Pro
wpmet
6.1
0%
Aug 28ElementsKit Pro <= 4.10.1 - Unauthenticated Stored Cross-Site Scripting via 's' Parameter
CVE-2026-24611
MP
MetForm Pro
WPMet
9.1
0%
Jun 17WordPress MetForm Pro plugin <= 3.9.1 - Broken Access Control vulnerability
CVE-2026-24610
MP
MetForm Pro
WPMet
4.3
0%
Jun 17WordPress MetForm Pro plugin <= 3.9.1 - Broken Access Control vulnerability
CVE-2026-54197
GE
GetGenie
Wpmet
6.5
0%
Jun 16WordPress GetGenie plugin <= 4.4.1 - Sensitive Data Exposure vulnerability
CVE-2026-49053
EE
ElementsKit Elementor addons Lite
Wpmet
5.3
0%
May 27WordPress ElementsKit Elementor addons Lite plugin <= 3.9.6 - Broken Access Control vulnerability
CVE-2026-49052
EE
ElementsKit Elementor addons Lite
Wpmet
4.3
0%
May 27WordPress ElementsKit Elementor addons Lite plugin <= 3.9.6 - Broken Access Control vulnerability
CVE-2026-1782
MP
MetForm Pro
Wpmet
5.3
0%
Apr 15MetForm Pro <= 3.9.7 - Unauthenticated Payment Amount Manipulation via 'mf-calculation'
CVE-2026-1261
MP
MetForm Pro
Wpmet
7.2
0%
Mar 10MetForm Pro <= 3.9.6 - Unauthenticated Stored Cross-Site Scripting
CVE-2025-3614
EE
Elementskit Elementor Addons
Wpmet
5.4
0%
Jul 24ElementsKit Elementor Addons and Templates <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Widget
CVE-2025-4479
EE
Elementskit Elementor Addons
Wpmet
5.4
0%
Jun 19ElementsKit Lite <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison Widget
CVE-2025-46253
GU
Gutenkit
Wpmet
5.4
0%
Apr 22WordPress GutenKit plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability
CVE-2024-11180
EE
Elementskit Elementor Addons
Wpmet
5.4
0%
Mar 29ElementsKit Elementor addons <= 3.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-1506
WS
WP Social Login And Register Social Counter
Wpmet
4.3
0%
Feb 28Wp Social Login and Register Social Counter <= 3.1.0 - Cross-Site Request Forgery to Settings Update
CVE-2025-0968
EE
Elementskit Elementor Addons
Wpmet
5.3
0%
Feb 19ElementsKit Elementor addons <= 3.4.0 - Unauthenticated Information Exposure via get_megamenu_content Function
CVE-2025-1005
EE
Elementskit Elementor Addons
Wpmet
5.4
0%
Feb 15ElementsKit Elementor addons <= 3.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion Widget
CVE-2025-0321
EP
ElementsKit Pro
wpmet
5.4
0%
Jan 28ElementsKit Pro <= 3.7.8 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via url Parameter
CVE-2023-50903
ME
Metform Elementor Contact Form Builder
Wpmet
9.8
1%
Dec 9WordPress Metform Elementor Contact Form Builder plugin <= 3.4.0 - Broken Access Control vulnerability
CVE-2024-37255
EK
Elements Kit Elementor Addons
Wpmet
5.3
0%
Nov 1WordPress ElementsKit Lite plugin <= 3.1.4 - Unauthenticated Broken Access Control vulnerability
CVE-2024-10091
EK
Elements Kit Elementor Addons
Wpmet
5.4
0%
Oct 26ElementsKit Elementor addons <= 3.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison Widget
CVE-2024-9234
GU
Gutenkit
Wpmet
9.8
10%
Oct 11GutenKit <= 2.1.0 - Unauthenticated Arbitrary File Upload
CVE-2024-8546
EE
Elementskit Elementor Addons
Wpmet
5.4
0%
Sep 25ElementsKit Elementor addons <= 3.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Widget
CVE-2024-43996
EL
Elementskit
Wpmet
6.5
1%
Sep 23WordPress ElementsKit Pro plugin <= 3.6.0 - Local File Inclusion vulnerability
CVE-2023-0714
ME
Metform Elementor Contact Form Builder
Wpmet
9.8
1%
Aug 17Metform Elementor Contact Form Builder <= 3.2.4 - Unauthenticated Double-Extension Arbitrary File Upload
CVE-2024-7063
EP
ElementsKit Pro
wpmet
4.3
0%
Aug 15ElementsKit Pro <= 3.6.6 - Authenticated (Contributor+) Sensitive Information Exposure
CVE-2024-7064
EP
ElementsKit Pro
wpmet
5.4
0%
Aug 15ElementsKit Pro <= 3.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-6698
FU
Fundengine
Wpmet
8.8
0%
Aug 1FundEngine – Donation and Crowdfunding Platform <= 1.7.0 - Authenticated (Subscriber+) Privilege Escalation
CVE-2024-6455
EK
Elements Kit Elementor Addons
Wpmet
5.3
0%
Jul 18ElementsKit Elementor addons <= 3.2.0 - Unauthenticated Information Exposure via ekit_widgetarea_content Function
CVE-2023-39993
EK
Elements kit Elementor addons
Wpmet
4.3
0%
Jun 19WordPress ElementsKit Lite plugin <= 2.9.0 - Broken Access Control vulnerability
CVE-2024-5263
EP
ElementsKit Pro
wpmet
5.4
0%
Jun 15ElementsKit Elementor addons and Templates Library <= 3.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Motion Text and Table Widgets
CVE-2024-4404
EP
ElementsKit Pro
wpmet
9.6
0%
Jun 14ElementsKit PRO <= 3.6.1 - Authenticated (Contributor+) Server-Side Request Forgery
CVE-2024-34758
WF
WP Fundraising Donation and Crowdfunding Platform
Wpmet
5.3
0%
Jun 11WordPress FundEngine – Donation and Crowdfunding Platform plugin <= 1.6.4 - Broken Access Control vulnerability
CVE-2024-4266
ME
Metform Elementor Contact Form Builder
Wpmet
7.5
1%
Jun 11MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor <= 3.8.8 - Unauthenticated Sensitive Information Exposure
CVE-2024-4452
EP
ElementsKit Pro
wpmet
5.4
0%
May 21ElementsKit Pro <= 3.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-32685
WU
WP Ultimate Review
Wpmet
5.3
0%
May 17Client-Side Enforcement of Server-Side Security vulnerability in Wpmet Wp Ultimate Review allows Functionality Bypass.This issue affects Wp Ultimate Review: from n/a through 2.2.5
CVE-2024-21746
WU
WP Ultimate Review
Wpmet
7.5
0%
May 17Authentication Bypass by Spoofing vulnerability in Roxnor Wp Ultimate Review wp-ultimate-review allows Identity Spoofing.This issue affects Wp Ultimate Review: from n/a through <=…
CVE-2024-33570
ME
Metform Elementor Contact Form Builder
Wpmet
8.8
0%
May 6Missing Authorization vulnerability in Roxnor Metform metform.This issue affects Metform: from n/a through <= 3.8.3
CVE-2024-3650
EK
Elements Kit Elementor Addons
Wpmet
5.4
0%
May 2The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Accordion widget in all versions 3.0.7 through 3.1.2 due to…
CVE-2024-3500
EL
Elementskit
Wpmet
8.8
1%
May 2The ElementsKit Pro plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.6.0 via the Price Menu, Hotspot, and Advanced Toggle widgets
CVE-2024-3499
EK
Elements Kit Elementor Addons
Wpmet
8.8
1%
May 2The ElementsKit Elementor addons plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.1.0 via the generate_navigation_markup function…
CVE-2024-32684
WU
WP Ultimate Review
Wpmet
7.5
0%
Apr 22Missing Authorization vulnerability in Wpmet Wp Ultimate Review.This issue affects Wp Ultimate Review: from n/a through 2.2.5
CVE-2024-32683
WU
WP Ultimate Review
Wpmet
7.5
0%
Apr 19Authorization Bypass Through User-Controlled Key vulnerability in Wpmet Wp Ultimate Review.This issue affects Wp Ultimate Review: from n/a through 2.2.5
CVE-2024-3598
EL
Elementskit
Wpmet
5.4
0%
Apr 19The ElementsKit Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Creative Button widget in all versions up to, and including, 3.6.0 due to…
CVE-2024-32505
EK
Elements Kit Elementor Addons
Wpmet
5.4
0%
Apr 17Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Roxnor ElementsKit Elementor addons Lite elementskit-lite.This issue affects…
CVE-2024-2803
EK
Elements Kit Elementor Addons
Wpmet
5.4
0%
Apr 4The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the countdown widget in all versions up to, and including, 3.0.6 due to…
CVE-2024-2791
ME
Metform Elementor Contact Form Builder
Wpmet
5.4
0%
Apr 2The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's widgets in all versions up to, and including, 3.8.5…
CVE-2024-2047
EK
Elements Kit Elementor Addons
Wpmet
8.8
1%
Mar 30The ElementsKit Elementor addons plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.0.6 via the render_raw function
CVE-2024-1238
EK
Elements Kit Elementor Addons
Wpmet
5.4
0%
Mar 30The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the button ID parameter in all versions up to, and including, 3.0.6 due to…
CVE-2024-2042
EK
Elements Kit Elementor Addons
Wpmet
5.4
0%
Mar 16The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Accordion widget in all versions up to, and including, 3.0.5 due…
CVE-2024-1239
EK
Elements Kit Elementor Addons
Wpmet
5.4
0%
Mar 16The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the blog post read more button in all versions up to, and including, 3.0.4…
CVE-2023-6525
EE
Elementskit Elementor Addons
Wpmet
4.8
0%
Mar 16The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the progress bar element attributes in all versions up to, and including,…
CVE-2024-1763
WS
WP Social Login And Register Social Counter
Wpmet
5.3
0%
Mar 13The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the /wp_social/v1/…
CVE-2024-1585
ME
Metform Elementor Contact Form Builder
Wpmet
5.4
1%
Mar 13The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including,…
CVE-2022-47160
WS
WP Social Login And Register Social Counter
Wpmet
6.5
1%
Jan 19Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wpmet Wp Social Login and Register Social Counter.This issue affects Wp Social Login and Register…
CVE-2023-6582
EK
Elements Kit Elementor Addons
Wpmet
5.3
1%
Jan 11The ElementsKit Elementor addons plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.0.3 via the ekit_widgetarea_content…
CVE-2023-6788
ME
Metform Elementor Contact Form Builder
Wpmet
5.4
0%
Jan 9The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.8.1
CVE-2023-28987
WU
WP Ultimate Review
Wpmet
8.8
0%
Nov 12Cross-Site Request Forgery (CSRF) vulnerability in Wpmet Wp Ultimate Review plugin <= 2.0.3 versions