Skip to content
OpenAdvisories

Product · Wpmet

MetForm Pro

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-24610

    WordPress MetForm Pro plugin <= 3.9.1 - Broken Access Control vulnerability

    Subscriber Broken Access Control in MetForm Pro <= 3.9.1 versions.

    Wpmet MetForm Pro
  • Medium 5.3
    CVE-2026-1782

    MetForm Pro <= 3.9.7 - Unauthenticated Payment Amount Manipulation via 'mf-calculation'

    The MetForm Pro plugin for WordPress is vulnerable to Improper Input Validation in all versions up to, and including, 3.9.7 This is due to the payment integrations (Stripe/PayPal) trusting a user-submitted calculation field value without recomputing or valida…

    Wpmet MetForm Pro Web / CMS