Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Wpmet vulnerabilities

31 published CVEs name Wpmet among the affected products.

All 31 in the listAtom feed of new CVEs
Published CVEs
31
Last 12 months
12
Critical
1
Known exploited
0

Critical 1High 3Medium 27Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20211
  2. 20234
  3. 202413
  4. 20251
  5. 202612

Newest CVEs

  • CVE-2026-114180

    WordPress Metform plugin <= 4.3.2 - Broken Access Control vulnerability

    Wpmet · Metform

    Medium5.3
  • CVE-2026-103339

    WordPress Metform plugin <= 4.3.0 - Cross Site Scripting (XSS) vulnerability

    Wpmet · Metform

    Medium6.5
  • CVE-2026-103063

    WordPress ElementsKit Elementor addons Lite plugin <= 4.0.6 - Cross Site Scripting (XSS) vulnerability

    Wpmet · ElementsKit Elementor addons Lite

    Medium6.5
  • CVE-2026-103064

    WordPress ElementsKit Elementor addons Lite plugin <= 4.0.6 - Cross Site Scripting (XSS) vulnerability

    Wpmet · ElementsKit Elementor addons Lite

    Medium6.5
  • CVE-2026-4246

    ElementsKit Pro <= 4.10.1 - Unauthenticated Stored Cross-Site Scripting via 's' Parameter

    wpmet · ElementsKit Pro

    Medium6.1
  • CVE-2026-24611

    WordPress MetForm Pro plugin <= 3.9.1 - Broken Access Control vulnerability

    WPMet · MetForm Pro

    Critical9.1
  • CVE-2026-24610

    WordPress MetForm Pro plugin <= 3.9.1 - Broken Access Control vulnerability

    WPMet · MetForm Pro

    Medium4.3
  • CVE-2026-54197

    WordPress GetGenie plugin <= 4.4.1 - Sensitive Data Exposure vulnerability

    Wpmet · GetGenie

    Medium6.5
  • CVE-2026-49053

    WordPress ElementsKit Elementor addons Lite plugin <= 3.9.6 - Broken Access Control vulnerability

    Wpmet · ElementsKit Elementor addons Lite

    Medium5.3
  • CVE-2026-49052

    WordPress ElementsKit Elementor addons Lite plugin <= 3.9.6 - Broken Access Control vulnerability

    Wpmet · ElementsKit Elementor addons Lite

    Medium4.3

Products with the most CVEs

  1. ElementsKit Pro9
  2. Wp Ultimate Review6
  3. ElementsKit Elementor addons Lite4
  4. MetForm Pro4
  5. Metform2
  6. Elements Kit Lite1
  7. Elements Kit Pro1
  8. Elements kit Elementor addons1
  9. GetGenie1
  10. ShopEngine1

Most common weaknesses

  1. CWE-79 Cross-site scripting (XSS)12
  2. CWE-862 Missing authorization8
  3. CWE-352 Cross-site request forgery (CSRF)3
  4. CWE-200 Exposure of sensitive information2
  5. CWE-20 Improper input validation1
  6. CWE-201 1
  7. CWE-602 1
  8. CWE-639 Authorization bypass through a user-controlled key (IDOR)1
  9. CWE-918 Server-side request forgery (SSRF)1
  10. CWE-98 PHP remote file inclusion1