Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Wpmet vulnerabilities

34 published CVEs name Wpmet among the affected products.

Newest CVEs

  • CVE-2026-122673

    WordPress ShopEngine plugin <= 4.9.8 - Cross Site Scripting (XSS) vulnerability

    Wpmet · ShopEngine

    Medium6.5
  • CVE-2026-120847

    WordPress Metform plugin <= 4.3.3 - Broken Access Control vulnerability

    Wpmet · Metform

    Medium4.3
  • CVE-2026-122675

    WordPress Wp Social plugin <= 3.2.3 - Cross Site Request Forgery (CSRF) vulnerability

    Wpmet · Wp Social

    Medium5.4
  • CVE-2026-114180

    WordPress Metform plugin <= 4.3.2 - Broken Access Control vulnerability

    Wpmet · Metform

    Medium5.3
  • CVE-2026-103339

    WordPress Metform plugin <= 4.3.0 - Cross Site Scripting (XSS) vulnerability

    Wpmet · Metform

    Medium6.5
  • CVE-2026-103063

    WordPress ElementsKit Elementor addons Lite plugin <= 4.0.6 - Cross Site Scripting (XSS) vulnerability

    Wpmet · ElementsKit Elementor addons Lite

    Medium6.5
  • CVE-2026-103064

    WordPress ElementsKit Elementor addons Lite plugin <= 4.0.6 - Cross Site Scripting (XSS) vulnerability

    Wpmet · ElementsKit Elementor addons Lite

    Medium6.5
  • CVE-2026-4246

    ElementsKit Pro <= 4.10.1 - Unauthenticated Stored Cross-Site Scripting via 's' Parameter

    wpmet · ElementsKit Pro

    Medium6.1
  • CVE-2026-24611

    WordPress MetForm Pro plugin <= 3.9.1 - Broken Access Control vulnerability

    WPMet · MetForm Pro

    Critical9.1
  • CVE-2026-24610

    WordPress MetForm Pro plugin <= 3.9.1 - Broken Access Control vulnerability

    WPMet · MetForm Pro

    Medium4.3