Vendor

roxnor

94 known vulnerabilities.

Products

MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor 23 ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor 19 FundEngine 6 Wp Social Login and Register Social Counter 6 WP Ultimate Review 6 Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers 5 ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution with eCommerce Templates & Woo Widgets 5 EmailKit – Email Customizer for WooCommerce & WP 4 FundEngine – Donation and Crowdfunding Platform 3 ElementsKit Elementor addons Lite 3 GetGenie – AI Content Writer with Keyword Research & SEO Tracking Tools 3 Metform 3 GetGenie 3 PopupKit 2 MetForm – Contact Form, Survey, Quiz, Conditional Forms, Form Templates & Custom Form Builder for Elementor 1 EmailKit 1 Rox Appointment Booking – Event, Calendar & Appointment Scheduling 1

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

Medium 6.4

CVE-2026-2600 Public exploit

ElementsKit Elementor Addons and Templates <= 3.7.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Simple Tab Widget

The ElementsKit Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ekit_tab_title' parameter in the Simple Tab widget in all versions up to, and including, 3.7.9 due to insufficient input sanitization and…

roxnor ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor Web / CMS

Apr 4, 2026
High 7.2

CVE-2023-0084 Public exploit EPSS 29%

Metform Elementor Contact Form Builder <= 3.1.2 - Unauthenticated Stored Cross-Site Scripting

The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via text areas on forms in versions up to, and including, 3.1.2 due to insufficient input sanitization and output escaping. This makes it possible for…

roxnor MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor Web / CMS

Mar 2, 2023
High 7.5

CVE-2022-1442 Public exploit

Metform Elementor Contact Form Builder <= 2.1.3 - Sensitive Information Disclosure

The Metform WordPress plugin is vulnerable to sensitive information disclosure due to improper access control in the ~/core/forms/action.php file which can be exploited by an unauthenticated attacker to view all API keys and secrets of integrated third-party …

roxnor MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor Web / CMS

May 10, 2022

roxnor

Products

ElementsKit Elementor Addons and Templates <= 3.7.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Simple Tab Widget

Metform Elementor Contact Form Builder <= 3.1.2 - Unauthenticated Stored Cross-Site Scripting

Metform Elementor Contact Form Builder <= 2.1.3 - Sensitive Information Disclosure