Skip to content
OpenAdvisories

Vendor

Wpmet

34 known vulnerabilities.

Products

ElementsKit Pro 9 Wp Ultimate Review 6 ElementsKit Elementor addons Lite 4 MetForm Pro 4 Metform 3 ShopEngine 2 Elements Kit Lite 1 Elements Kit Pro 1 WP Fundraising Donation and Crowdfunding Platform 1 Wp Social Login and Register Social Counter 1 Wp Social 1 Elements kit Elementor addons 1 GetGenie 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.2
    CVE-2026-1261

    MetForm Pro <= 3.9.6 - Unauthenticated Stored Cross-Site Scripting

    The MetForm Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Quiz feature in all versions up to, and including, 3.9.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers…

    Wpmet MetForm Pro Web / CMS
  • High 8.5
    CVE-2024-4404

    ElementsKit PRO <= 3.6.1 - Authenticated (Contributor+) Server-Side Request Forgery

    The ElementsKit PRO plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including, 3.6.2 via the 'render_raw' function. This can allow authenticated attackers, with contributor-level permissions and above, to make web requ…

    Wpmet ElementsKit Pro Web / CMS
  • High 8.8
    CVE-2024-3500

    ElementsKit Pro <= 3.6.0 - Authenticated (Contributor+) Local File Inclusion via Price Menu, Hotspot, and Advanced Toggle Widgets

    The ElementsKit Pro plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.6.0 via the Price Menu, Hotspot, and Advanced Toggle widgets. This makes it possible for authenticated attackers, with contributor-level acc…

    Wpmet ElementsKit Pro Web / CMS