VendorsWpmetmetform_elementor_contact_form_builderany version
Vulnerabilities

Wpmet Metform Elementor Contact Form Builder any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

23CVEs
CVE-2023-0714
Metform Elementor Contact Form Builder <= 3.2.4 - Unauthenticated Double-Extension Arbitrary File Upload
Published 2024-08-17 · Analyzed
9.8EPSS 0.010
CVE-2023-50903
WordPress Metform Elementor Contact Form Builder plugin <= 3.4.0 - Broken Access Control vulnerability
Published 2024-12-09 · Modified
9.8EPSS 0.006
CVE-2024-33570
WordPress MetForm plugin <= 3.8.3 - Broken Access Control vulnerability
Published 2024-05-06 · Modified
8.8EPSS 0.004
CVE-2023-0721
Metform Elementor Contact Form Builder <= 3.3.0 - Unauthenticated CSV Injection
Published 2023-06-09 · Modified
8.3EPSS 0.007
CVE-2022-1442
Metform Elementor Contact Form Builder <= 2.1.3 - Sensitive Information Disclosure
Published 2022-05-10 · Modified
7.5EPSS 0.088
CVE-2024-4266
MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor <= 3.8.8 - Unauthenticated Sensitive Information Exposure
Published 2024-06-11 · Modified
7.5EPSS 0.005
CVE-2023-0084
Metform Elementor Contact Form Builder <= 3.1.2 - Unauthenticated Stored Cross-Site Scripting
Published 2023-03-02 · Modified
7.21 PoCEPSS 0.286
CVE-2023-0688
Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via mf_thankyou shortcode
Published 2023-06-09 · Modified
6.5EPSS 0.007
CVE-2023-0693
Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via 'mf_transaction_id' shortcode
Published 2023-06-09 · Modified
6.5EPSS 0.007
CVE-2023-0694
Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via mf shortcode
Published 2023-06-09 · Modified
6.5EPSS 0.007
CVE-2023-1843
Metform Elementor Contact Form Builder <= 3.3.0 - Missing Authorization
Published 2023-06-09 · Modified
6.5EPSS 0.006
CVE-2024-1585
Metform Elementor Contact Form Builder <= 3.8.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Published 2024-03-13 · Modified
6.4EPSS 0.005
CVE-2024-2791
Metform Elementor Contact Form Builder <= 3.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widgets
Published 2024-04-02 · Modified
6.4EPSS 0.003
CVE-2023-0708
Metform Elementor Contact Form Builder <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via mf_first_name shortcode
Published 2023-06-09 · Modified
5.4EPSS 0.006
CVE-2023-0709
Metform Elementor Contact Form Builder <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via mf_last_name shortcode
Published 2023-06-09 · Modified
5.4EPSS 0.006
CVE-2023-0695
Metform Elementor Contact Form Builder <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via mf shortcode
Published 2023-06-09 · Modified
5.4EPSS 0.004
CVE-2023-2517
Metform Elementor Contact Form Builder <= 3.3.2 - Cross-Site Request Forgery via permalink_setup
Published 2023-07-12 · Modified
5.4EPSS 0.004
CVE-2023-0710
Metform Elementor Contact Form Builder <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via mf_thankyou shortcode
Published 2023-06-09 · Modified
5.4EPSS 0.004
CVE-2023-6788
Metform Elementor Contact Form Builder <= 3.8.1 - Cross-Site Request Forgery
Published 2024-01-09 · Modified
5.4EPSS 0.002
CVE-2023-0085
Metform Elementor Contact Form Builder <= 3.2.1 - reCaptcha Protection Bypass
Published 2023-03-02 · Modified
5.3EPSS 0.007
CVE-2023-0692
Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via 'mf_payment_status' shortcode
Published 2023-06-09 · Modified
4.3EPSS 0.006
CVE-2023-0691
Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via mf_last_name shortcode
Published 2023-06-09 · Modified
4.3EPSS 0.006
CVE-2023-0689
Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via 'mf_first_name' shortcode
Published 2023-08-31 · Modified
4.3EPSS 0.006