CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

319 matches found

CVE•added 2026/01/24 8:26 a.m.•39 views

CVE-2026-0633

MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor (WordPress)

3.7CVSS5.5AI score0.00191EPSS

SaveExploits0References2

Vulnrichment•added 2026/01/24 8:26 a.m.•6 views

CVE-2026-0633 MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor <= 4.1.0 - Unauthenticated Form Submission Exposure via Forgeable Cookie Value

The MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 4.1.0. This is due to the use of a forgeable cookie value derived only from the entry ID and current user ID without...

3.7CVSS5.9AI score0.00191EPSS

SaveExploits0References2

Positive Technologies•added 2026/01/24 12:00 a.m.•21 views

PT-2026-4593

3.7CVSS5.5AI score0.00191EPSS

SaveExploits0References3

CNNVD•added 2026/01/24 12:00 a.m.•15 views

WordPress plugin MetForm has a licensing issue vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

3.7CVSS5.8AI score0.00191EPSS

SaveExploits0References3

Patchstack•added 2026/01/12 3:14 p.m.•9 views

WordPress MetForm Pro plugin <= 3.9.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin MetForm Pro versions = 3.9.1...

5.4AI score0.00243EPSS

SaveExploits0Affected Software1

NVD•added 2026/01/07 12:16 p.m.•18 views

CVE-2025-14059

The EmailKit plugin for WordPress is vulnerable to Arbitrary File Read via Path Traversal in all versions up to, and including, 1.6.1. This is due to missing path validation in the createtemplate REST API endpoint where user-controlled input from the emailkit-editor-template parameter is passed...

6.5CVSS0.00259EPSS

SaveExploits0References3