Metform Elementor Contact Form Builder vulnerabilities
5 known vulnerabilities in Metform Elementor Contact Form Builder from Wpmet. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
Metform: Missing Authorization
Missing Authorization vulnerability in Roxnor Metform metform allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Metform: from n/a through <= 3.4.0.
- 9.8 Critical severity
MetForm – Contact Form, Survey, Quiz, & Custom…: Unrestricted Upload of File with Dangerous Type
The Metform Elementor Contact Form Builder for WordPress is vulnerable to Arbitrary File Upload due to insufficient file type validation in versions up to, and including, 3.2.4. This allows unauthenticated visitors to perform a "double extension" attack and up
- 7.5 High severity
MetForm – Contact Form, Survey, Quiz, & Custom…: Exposure of Sensitive Information to an Unauthorized Actor
The MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 3.8.8 via the 'handle_file' function. This can allow unauthenticated attackers
- 7.8 High severity
MetForm – Contact Form, Survey, Quiz, & Custom…: Improper Neutralization of Formula Elements in a CSV File
The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to CSV injection in versions up to, and including, 3.3.0. This allows unauthenticated attackers to embed untrusted input into exported CSV files, which can result in code execution w
- 7.5 High severity
MetForm – Contact Form, Survey, Quiz, & Custom…: Missing Authorization
The Metform WordPress plugin is vulnerable to sensitive information disclosure due to improper access control in the ~/core/forms/action.php file which can be exploited by an unauthenticated attacker to view all API keys and secrets of integrated third-party A