Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Metform — Vulnerabilities & Security Advisories 9

All 9 CVE vulnerabilities found in Metform, with AI-generated Chinese analysis, references, and POCs.

Vendor: Roxnor

CVE ID Title CVSS Severity Published
CVE-2026-114180 WordPress Metform plugin <= 4.3.2 - Broken Access Control vulnerability CWE-862 5.3 Medium 2026-10-22
CVE-2026-86833 MetForm < 4.3.1 - Unauthenticated HTML Injection in Notification Emails via Field Shortcodes 5.4 Medium 2026-10-07
CVE-2026-86832 MetForm < 4.3.1 - Unauthenticated Form Entry Data Disclosure via REST API - - 2026-10-03
CVE-2026-86834 MetForm 2.2.1 - 4.3.0 - Unauthenticated Debug File Disclosure via HubSpot Forms Integration - - 2026-10-03
CVE-2026-103339 WordPress Metform plugin <= 4.3.0 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium 2026-10-01
CVE-2026-86813 MetForm < 4.1.9 - Unauthenticated Email Header Injection via Notification Reply-To 4.8 Medium 2026-09-11
CVE-2025-30914 WordPress Metform Elementor Contact Form Builder plugin <= 3.9.7 - Server Side Request Forgery (SSRF) vulnerability CWE-918 4.4 Medium 2025-03-27
CVE-2023-50903 WordPress Metform Elementor Contact Form Builder plugin <= 3.4.0 - Broken Access Control vulnerability CWE-862 5.3 Medium 2024-12-09
CVE-2024-33570 WordPress MetForm plugin <= 3.8.3 - Broken Access Control vulnerability CWE-862 4.3 Medium 2024-05-06

All 9 known CVE vulnerabilities affecting Metform with full Chinese analysis, references, and POCs where available.