Wpmet
- Total products in the ecosystem
- 13
- Total vulnerabilities (90 days)
- 7
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/08/2026, Wpmet recorded 7 security vulnerabilities in the last 90 days across 4 products, including 0 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, Metform had the most security vulnerabilities in the Wpmet ecosystem, with 3 vulnerabilities—approximately 42.86% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-122675WordPress Wp Social plugin <= 3.2.3 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2026-120847WordPress Metform plugin <= 4.3.3 - Broken Access Control vulnerabilityCVE-2026-114180WordPress Metform plugin <= 4.3.2 - Broken Access Control vulnerabilityCVE-2026-103339WordPress Metform plugin <= 4.3.0 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-103064WordPress ElementsKit Elementor addons Lite plugin <= 4.0.6 - Cross Site Scripting (XSS) vulnerability| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-122675WordPress Wp Social plugin <= 3.2.3 - Cross Site Request Forgery (CSRF) vulnerability | Exploitation statusNot exploited | FixYes |
| Affected productWp Social |
| Published11/07/2026 |
| SeverityMedium |
CVE-2026-120847WordPress Metform plugin <= 4.3.3 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Affected productMetform | Published11/07/2026 | SeverityMedium |
|---|
CVE-2026-114180WordPress Metform plugin <= 4.3.2 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Affected productMetform | Published10/22/2026 | SeverityMedium |
|---|
CVE-2026-103339WordPress Metform plugin <= 4.3.0 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productMetform | Published10/01/2026 | SeverityMedium |
|---|
CVE-2026-103064WordPress ElementsKit Elementor addons Lite plugin <= 4.0.6 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productElementsKit Elementor addons Lite | Published10/01/2026 | SeverityMedium |
|---|
CVE-2026-103063WordPress ElementsKit Elementor addons Lite plugin <= 4.0.6 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productElementsKit Elementor addons Lite | Published10/01/2026 | SeverityMedium |
|---|
CVE-2026-4246ElementsKit Pro <= 4.10.1 - Unauthenticated Stored Cross-Site Scripting via 's' Parameter | Exploitation statusNot exploited | FixYes | Affected productElementsKit Pro | Published08/28/2026 | SeverityMedium |
|---|
CVE-2026-24611WordPress MetForm Pro plugin <= 3.9.1 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Affected productMetForm Pro | Published06/17/2026 | SeverityCritical |
|---|
CVE-2026-24610WordPress MetForm Pro plugin <= 3.9.1 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Affected productMetForm Pro | Published06/17/2026 | SeverityMedium |
|---|
CVE-2026-54197WordPress GetGenie plugin <= 4.4.1 - Sensitive Data Exposure vulnerability | Exploitation statusNot exploited | FixYes | Affected productGetGenie | Published06/16/2026 | SeverityMedium |
|---|
CVE-2026-49053WordPress ElementsKit Elementor addons Lite plugin <= 3.9.6 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Affected productElementsKit Elementor addons Lite | Published05/27/2026 | SeverityMedium |
|---|
CVE-2026-49052WordPress ElementsKit Elementor addons Lite plugin <= 3.9.6 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Affected productElementsKit Elementor addons Lite | Published05/27/2026 | SeverityMedium |
|---|
CVE-2026-1782MetForm Pro <= 3.9.7 - Unauthenticated Payment Amount Manipulation via 'mf-calculation' | Exploitation statusNot exploited | FixYes | Affected productMetForm Pro | Published04/15/2026 | SeverityMedium |
|---|
CVE-2026-1261MetForm Pro <= 3.9.6 - Unauthenticated Stored Cross-Site Scripting | Exploitation statusNot exploited | FixYes | Affected productMetForm Pro | Published03/10/2026 | SeverityHigh |
|---|
CVE-2025-0321ElementsKit Pro <= 3.7.8 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via url Parameter | Exploitation statusNot exploited | FixYes | Affected productElementsKit Pro | Published01/28/2025 | SeverityMedium |
|---|
CVE-2024-7064ElementsKit Pro <= 3.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting | Exploitation statusNot exploited | FixYes | Affected productElementsKit Pro | Published08/15/2024 | SeverityMedium |
|---|
CVE-2024-7063ElementsKit Pro <= 3.6.6 - Authenticated (Contributor+) Sensitive Information Exposure | Exploitation statusNot exploited | FixYes | Affected productElementsKit Pro | Published08/15/2024 | SeverityMedium |
|---|
CVE-2023-39993WordPress ElementsKit Lite plugin <= 2.9.0 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Affected productElements kit Elementor addons | Published06/19/2024 | SeverityMedium |
|---|
CVE-2024-5263ElementsKit Elementor addons and Templates Library <= 3.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Motion Text and Table Widgets | Exploitation statusNot exploited | FixYes | Affected productElementsKit Pro | Published06/15/2024 | SeverityMedium |
|---|
CVE-2024-4404ElementsKit PRO <= 3.6.1 - Authenticated (Contributor+) Server-Side Request Forgery | Exploitation statusNot exploited | FixYes | Affected productElementsKit Pro | Published06/14/2024 | SeverityHigh |
|---|
CVE-2024-34758WordPress FundEngine – Donation and Crowdfunding Platform plugin <= 1.6.4 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Affected productWP Fundraising Donation and Crowdfunding Platform | Published06/11/2024 | SeverityMedium |
|---|
CVE-2024-4452ElementsKit Pro <= 3.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting | Exploitation statusNot exploited | FixYes | Affected productElementsKit Pro | Published05/21/2024 | SeverityMedium |
|---|
CVE-2024-32685WordPress WP Ultimate Review plugin <= 2.2.5 - Review Score Manipulation vulnerability | Exploitation statusNot exploited | FixYes | Affected productWp Ultimate Review | Published05/17/2024 | SeverityMedium |
|---|
CVE-2024-3500ElementsKit Pro <= 3.6.0 - Authenticated (Contributor+) Local File Inclusion via Price Menu, Hotspot, and Advanced Toggle Widgets | Exploitation statusNot exploited | FixYes | Affected productElementsKit Pro | Published05/02/2024 | SeverityHigh |
|---|
CVE-2024-32684WordPress WP Ultimate Review plugin <= 2.2.5 - Broken Access Control on Review vulnerability | Exploitation statusNot exploited | FixYes | Affected productWp Ultimate Review | Published04/22/2024 | SeverityMedium |
|---|
CVE-2024-3598ElementsKit Pro <= 3.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'ekit_btn_id' | Exploitation statusNot exploited | FixYes | Affected productElementsKit Pro | Published04/19/2024 | SeverityMedium |
|---|
CVE-2024-32683WordPress WP Ultimate Review plugin <= 2.2.5 - Insecure Direct Object References (IDOR) vulnerability | Exploitation statusNot exploited | FixYes | Affected productWp Ultimate Review | Published04/19/2024 | SeverityMedium |
|---|
CVE-2022-47160WordPress Wp Social Plugin <= 1.9.0 is vulnerable to Sensitive Data Exposure | Exploitation statusNot exploited | FixYes | Affected productWp Social Login and Register Social Counter | Published01/19/2024 | SeverityMedium |
|---|
CVE-2023-28987WordPress Wp Ultimate Review Plugin <= 2.0.3 is vulnerable to Cross Site Request Forgery (CSRF) | Exploitation statusNot exploited | FixYes | Affected productWp Ultimate Review | Published11/12/2023 | SeverityMedium |
|---|
CVE-2023-46085WordPress Wp Ultimate Review Plugin <= 2.2.4 is vulnerable to Cross Site Request Forgery (CSRF) | Exploitation statusNot exploited | FixYes | Affected productWp Ultimate Review | Published10/22/2023 | SeverityMedium |
|---|
CVE-2023-28751WordPress Wp Ultimate Review Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS) | Exploitation statusNot exploited | FixYes | Affected productWp Ultimate Review | Published06/23/2023 | SeverityMedium |
|---|
CVE-2022-45371WordPress ShopEngine Plugin <= 4.1.1 is vulnerable to Cross Site Request Forgery (CSRF) | Exploitation statusNot exploited | FixYes | Affected productShopEngine | Published05/25/2023 | SeverityMedium |
|---|
CVE-2021-24258ElementsKit and ElementsKit Pro < 2.2.0 - Contributor+ Stored XSS | Exploitation statusNot confirmed | FixYes | Affected productElements Kit Lite | Published05/05/2021 | SeverityUnknown |
|---|
33 Results | Page 1 of 1