Description
Unauthenticated Broken Access Control in MetForm Pro <= 3.9.1 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WPMet | MetForm Pro | ≤ 3.9.1 | — |
Critical · 9.1
CVE-2026-24611
EUVD-2026-37665GHSA-9cpf-p5q4-qjrx
WordPress MetForm Pro plugin <= 3.9.1 - Broken Access Control vulnerability
Published Jun 17, 2026 · Updated Jun 17, 2026 · Assigned by Patchstack