wpmet Vulnerability Advisory Catalog

Total 67 security vulnerabilities recorded for wpmet software and firmware.

← Back to All Vendors
CVE-2025-3614 MEDIUM
Component: elementskit_elementor_addons

The ElementsKit Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the URL attribute of a custom wid...

📅 2025-07-24
CVSS 6.4 Dossier →
CVE-2025-4479 MEDIUM
Component: elementskit_elementor_addons

The ElementsKit Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin image comparison widge...

📅 2025-06-19
CVSS 6.4 Dossier →
Component: gutenkit

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ataur R GutenKit gutenkit-blocks-addon allows St...

📅 2025-04-22
CVSS 6.5 Dossier →
Component: elementskit_elementor_addons

The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Countdown Timer Widget ekit_countdown_timer...

📅 2025-03-29
CVSS 6.4 Dossier →
CVE-2025-1506 MEDIUM
Component: wp_social_login_and_register_social_counter

The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including,...

📅 2025-02-28
CVSS 4.3 Dossier →
CVE-2025-0968 MEDIUM
Component: elementskit_elementor_addons

The ElementsKit Elementor addons plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.4.0 due...

📅 2025-02-19
CVSS 5.3 Dossier →
CVE-2025-1005 MEDIUM
Component: elementskit_elementor_addons

The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Accordion widget in all vers...

📅 2025-02-15
CVSS 6.4 Dossier →
CVE-2025-0321 MEDIUM
Component: elementskit

The ElementsKit Pro plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the ‘url’ parameter in all versions up to, and inc...

📅 2025-01-28
CVSS 6.4 Dossier →
Component: metform_elementor_contact_form_builder

Missing Authorization vulnerability in Roxnor Metform metform allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec...

📅 2024-12-09
CVSS 5.3 Dossier →
Component: elements_kit_elementor_addons

Missing Authorization vulnerability in Roxnor ElementsKit Elementor addons Lite elementskit-lite.This issue affects ElementsKit Elementor addons Lite:...

📅 2024-11-01
CVSS 5.3 Dossier →
Component: elements_kit_elementor_addons

The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Comparison Widget in all versions up ...

📅 2024-10-26
CVSS 6.4 Dossier →
CVE-2024-8546 MEDIUM
Component: elementskit_elementor_addons

The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Video widget in all versions up to...

📅 2024-09-25
CVSS 6.4 Dossier →
Component: elementskit

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ElementsKit ElementsKit Pro allows PHP Local File Incl...

📅 2024-09-23
CVSS 6.5 Dossier →
Component: metform_elementor_contact_form_builder

The Metform Elementor Contact Form Builder for WordPress is vulnerable to Arbitrary File Upload due to insufficient file type validation in versions u...

📅 2024-08-17
CVSS 8.1 Dossier →
CVE-2024-7064 MEDIUM
Component: elementskit

The ElementsKit Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in all versions up to, and including, 3.6...

📅 2024-08-15
CVSS 6.4 Dossier →
CVE-2024-7063 MEDIUM
Component: elementskit

The ElementsKit Pro plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.6.6 via the 'render_r...

📅 2024-08-15
CVSS 4.3 Dossier →
Component: fundengine

The FundEngine plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.7.0. This is due to the plugin not p...

📅 2024-08-01
CVSS 8.8 Dossier →
CVE-2024-6455 MEDIUM
Component: elements_kit_elementor_addons

The ElementsKit Elementor addons plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.2.0 due to a missi...

📅 2024-07-18
CVSS 5.3 Dossier →
Component: elements_kit_elementor_addons

Missing Authorization vulnerability in Wpmet Elements kit Elementor addons.This issue affects Elements kit Elementor addons: from n/a through 2.9.0....

📅 2024-06-19
CVSS 4.3 Dossier →
CVE-2024-5263 MEDIUM
Component: elementskit

The ElementsKit Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Motion Text and Table widgets in all versions u...

📅 2024-06-15
CVSS 6.4 Dossier →
Component: elementskit

The ElementsKit PRO plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including, 3.6.2 via the 'render_raw' fun...

📅 2024-06-14
CVSS 8.5 Dossier →
CVE-2024-4266 MEDIUM
Component: metform_elementor_contact_form_builder

The MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in ...

📅 2024-06-11
CVSS 5.3 Dossier →
CVE-2024-4452 MEDIUM
Component: elementskit

The ElementsKit Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in versions up to, and including, 3.6.1 ...

📅 2024-05-21
CVSS 6.4 Dossier →
Component: wp_ultimate_review

Client-Side Enforcement of Server-Side Security vulnerability in Wpmet Wp Ultimate Review allows Functionality Bypass.This issue affects Wp Ultimate R...

📅 2024-05-17
CVSS 5.3 Dossier →
Page 1 of 3 (67 Total Records)