Wpmet vulnerabilities
34 CVEs and advisories name Wpmet as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-122673WordPress ShopEngine plugin <= 4.9.8 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-120847WordPress Metform plugin <= 4.3.3 - Broken Access Control vulnerability
- CVE-2026-122675WordPress Wp Social plugin <= 3.2.3 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2026-114180WordPress Metform plugin <= 4.3.2 - Broken Access Control vulnerability
- CVE-2026-103339WordPress Metform plugin <= 4.3.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-103063WordPress ElementsKit Elementor addons Lite plugin <= 4.0.6 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-103064WordPress ElementsKit Elementor addons Lite plugin <= 4.0.6 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-4246ElementsKit Pro <= 4.10.1 - Unauthenticated Stored Cross-Site Scripting via 's' Parameter
- CVE-2026-24611WordPress MetForm Pro plugin <= 3.9.1 - Broken Access Control vulnerability
- CVE-2026-24610WordPress MetForm Pro plugin <= 3.9.1 - Broken Access Control vulnerability
- CVE-2026-54197WordPress GetGenie plugin <= 4.4.1 - Sensitive Data Exposure vulnerability
- CVE-2026-49053WordPress ElementsKit Elementor addons Lite plugin <= 3.9.6 - Broken Access Control vulnerability
- CVE-2026-49052WordPress ElementsKit Elementor addons Lite plugin <= 3.9.6 - Broken Access Control vulnerability
- CVE-2026-1782MetForm Pro <= 3.9.7 - Unauthenticated Payment Amount Manipulation via 'mf-calculation'
- CVE-2026-1261MetForm Pro <= 3.9.6 - Unauthenticated Stored Cross-Site Scripting
- CVE-2025-0321ElementsKit Pro <= 3.7.8 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via url Parameter
- CVE-2024-7063ElementsKit Pro <= 3.6.6 - Authenticated (Contributor+) Sensitive Information Exposure
- CVE-2024-7064ElementsKit Pro <= 3.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2023-39993WordPress ElementsKit Lite plugin <= 2.9.0 - Broken Access Control vulnerability
- CVE-2024-5263ElementsKit Elementor addons and Templates Library <= 3.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Motion Text and Table Widgets
- CVE-2024-4404ElementsKit PRO <= 3.6.1 - Authenticated (Contributor+) Server-Side Request Forgery
- CVE-2024-34758WordPress FundEngine – Donation and Crowdfunding Platform plugin <= 1.6.4 - Broken Access Control vulnerability
- CVE-2024-4452ElementsKit Pro <= 3.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-32685WordPress WP Ultimate Review plugin <= 2.2.5 - Review Score Manipulation vulnerability
- CVE-2024-3500ElementsKit Pro <= 3.6.0 - Authenticated (Contributor+) Local File Inclusion via Price Menu, Hotspot, and Advanced Toggle Widgets
- CVE-2024-32684WordPress WP Ultimate Review plugin <= 2.2.5 - Broken Access Control on Review vulnerability
- CVE-2024-32683WordPress WP Ultimate Review plugin <= 2.2.5 - Insecure Direct Object References (IDOR) vulnerability
- CVE-2024-3598ElementsKit Pro <= 3.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'ekit_btn_id'
- CVE-2022-47160WordPress Wp Social Plugin <= 1.9.0 is vulnerable to Sensitive Data Exposure
- CVE-2023-28987WordPress Wp Ultimate Review Plugin <= 2.0.3 is vulnerable to Cross Site Request Forgery (CSRF)