Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Wpmet vulnerabilities

33 published CVEs name Wpmet among the affected products.

All 33 in the listAtom feed of new CVEs
Published CVEs
33
Last 12 months
14
Critical
1
Known exploited
0

Critical 1High 3Medium 29Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20211
  2. 20234
  3. 202413
  4. 20251
  5. 202614

Newest CVEs

  • CVE-2026-120847

    WordPress Metform plugin <= 4.3.3 - Broken Access Control vulnerability

    Wpmet · Metform

    Medium4.3
  • CVE-2026-122675

    WordPress Wp Social plugin <= 3.2.3 - Cross Site Request Forgery (CSRF) vulnerability

    Wpmet · Wp Social

    Medium5.4
  • CVE-2026-114180

    WordPress Metform plugin <= 4.3.2 - Broken Access Control vulnerability

    Wpmet · Metform

    Medium5.3
  • CVE-2026-103339

    WordPress Metform plugin <= 4.3.0 - Cross Site Scripting (XSS) vulnerability

    Wpmet · Metform

    Medium6.5
  • CVE-2026-103063

    WordPress ElementsKit Elementor addons Lite plugin <= 4.0.6 - Cross Site Scripting (XSS) vulnerability

    Wpmet · ElementsKit Elementor addons Lite

    Medium6.5
  • CVE-2026-103064

    WordPress ElementsKit Elementor addons Lite plugin <= 4.0.6 - Cross Site Scripting (XSS) vulnerability

    Wpmet · ElementsKit Elementor addons Lite

    Medium6.5
  • CVE-2026-4246

    ElementsKit Pro <= 4.10.1 - Unauthenticated Stored Cross-Site Scripting via 's' Parameter

    wpmet · ElementsKit Pro

    Medium6.1
  • CVE-2026-24611

    WordPress MetForm Pro plugin <= 3.9.1 - Broken Access Control vulnerability

    WPMet · MetForm Pro

    Critical9.1
  • CVE-2026-24610

    WordPress MetForm Pro plugin <= 3.9.1 - Broken Access Control vulnerability

    WPMet · MetForm Pro

    Medium4.3
  • CVE-2026-54197

    WordPress GetGenie plugin <= 4.4.1 - Sensitive Data Exposure vulnerability

    Wpmet · GetGenie

    Medium6.5

Products with the most CVEs

  1. ElementsKit Pro9
  2. Wp Ultimate Review6
  3. ElementsKit Elementor addons Lite4
  4. MetForm Pro4
  5. Metform3
  6. Elements Kit Lite1
  7. Elements Kit Pro1
  8. Elements kit Elementor addons1
  9. GetGenie1
  10. ShopEngine1

Most common weaknesses

  1. CWE-79 Cross-site scripting (XSS)12
  2. CWE-862 Missing authorization9
  3. CWE-352 Cross-site request forgery (CSRF)4
  4. CWE-200 Exposure of sensitive information2
  5. CWE-20 Improper input validation1
  6. CWE-201 1
  7. CWE-602 1
  8. CWE-639 Authorization bypass through a user-controlled key (IDOR)1
  9. CWE-918 Server-side request forgery (SSRF)1
  10. CWE-98 PHP remote file inclusion1