wpmet Vulnerability Advisory Catalog

Total 67 security vulnerabilities recorded for wpmet software and firmware.

← Back to All Vendors
Component: wp_ultimate_review

Authentication Bypass by Spoofing vulnerability in Roxnor Wp Ultimate Review wp-ultimate-review allows Identity Spoofing.This issue affects Wp Ultimat...

๐Ÿ“… 2024-05-17
CVSS 5.3 Dossier →
Component: metform_elementor_contact_form_builder

Missing Authorization vulnerability in Roxnor Metform metform.This issue affects Metform: from n/a through <= 3.8.3....

๐Ÿ“… 2024-05-06
CVSS 4.3 Dossier →
CVE-2024-3650 MEDIUM
Component: elements_kit_elementor_addons

The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Accordion widget in all versions 3.0....

๐Ÿ“… 2024-05-02
CVSS 6.4 Dossier →
Component: elementskit

The ElementsKit Pro plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.6.0 via the Price Menu, Hotspot...

๐Ÿ“… 2024-05-02
CVSS 8.8 Dossier →
Component: elements_kit_elementor_addons

The ElementsKit Elementor addons plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.1.0 via the genera...

๐Ÿ“… 2024-05-02
CVSS 8.8 Dossier →
Component: wp_ultimate_review

Missing Authorization vulnerability in Wpmet Wp Ultimate Review.This issue affects Wp Ultimate Review: from n/a through 2.2.5....

๐Ÿ“… 2024-04-22
CVSS 5.3 Dossier →
Component: wp_ultimate_review

Authorization Bypass Through User-Controlled Key vulnerability in Wpmet Wp Ultimate Review.This issue affects Wp Ultimate Review: from n/a through 2.2...

๐Ÿ“… 2024-04-19
CVSS 5.3 Dossier →
CVE-2024-3598 MEDIUM
Component: elementskit

The ElementsKit Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Creative Button widget in all versions up to, a...

๐Ÿ“… 2024-04-19
CVSS 6.4 Dossier →
Component: elements_kit_elementor_addons

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Roxnor ElementsKit Elementor addons Lite element...

๐Ÿ“… 2024-04-17
CVSS 6.5 Dossier →
CVE-2024-2803 MEDIUM
Component: elements_kit_elementor_addons

The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the countdown widget in all versions up to, and...

๐Ÿ“… 2024-04-04
CVSS 6.4 Dossier →
CVE-2024-2791 MEDIUM
Component: metform_elementor_contact_form_builder

The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's widgets in all versions ...

๐Ÿ“… 2024-04-02
CVSS 6.4 Dossier →
Component: elements_kit_elementor_addons

The ElementsKit Elementor addons plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.0.6 via the render...

๐Ÿ“… 2024-03-30
CVSS 8.8 Dossier →
CVE-2024-1238 MEDIUM
Component: elements_kit_elementor_addons

The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the button ID parameter in all versions up to, ...

๐Ÿ“… 2024-03-30
CVSS 6.4 Dossier →
CVE-2024-2042 MEDIUM
Component: elements_kit_elementor_addons

The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Accordion widget in all versions up t...

๐Ÿ“… 2024-03-16
CVSS 6.4 Dossier →
CVE-2024-1239 MEDIUM
Component: elements_kit_elementor_addons

The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the blog post read more button in all versions ...

๐Ÿ“… 2024-03-16
CVSS 6.4 Dossier →
CVE-2023-6525 MEDIUM
Component: elementskit_elementor_addons

The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the progress bar element attributes in all vers...

๐Ÿ“… 2024-03-16
CVSS 5.5 Dossier →
CVE-2024-1763 MEDIUM
Component: wp_social_login_and_register_social_counter

The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability ch...

๐Ÿ“… 2024-03-13
CVSS 6.5 Dossier →
CVE-2024-1585 MEDIUM
Component: metform_elementor_contact_form_builder

The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all vers...

๐Ÿ“… 2024-03-13
CVSS 6.4 Dossier →
Component: wp_social_login_and_register_social_counter

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wpmet Wp Social Login and Register Social Counter.This issue affects Wp So...

๐Ÿ“… 2024-01-19
CVSS 6.5 Dossier →
CVE-2023-6582 MEDIUM
Component: elements_kit_elementor_addons

The ElementsKit Elementor addons plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.0.3 via ...

๐Ÿ“… 2024-01-11
CVSS 5.3 Dossier →
CVE-2023-6788 MEDIUM
Component: metform_elementor_contact_form_builder

The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.8....

๐Ÿ“… 2024-01-09
CVSS 5.4 Dossier →
Component: wp_ultimate_review

Cross-Site Request Forgery (CSRF) vulnerability in Wpmet Wp Ultimate Review pluginย <= 2.0.3 versions....

๐Ÿ“… 2023-11-12
CVSS 4.3 Dossier →
Component: wp_ultimate_review

Cross-Site Request Forgery (CSRF) vulnerability in Wpmet Wp Ultimate Review plugin <=ย 2.2.4 versions....

๐Ÿ“… 2023-10-22
CVSS 4.3 Dossier →
CVE-2023-0689 MEDIUM
Component: metform_elementor_contact_form_builder

The Metform Elementor Contact Form Builder for WordPress is vulnerable to Information Disclosure via the 'mf_first_name' shortcode in versions up to, ...

๐Ÿ“… 2023-08-31
CVSS 4.3 Dossier →
Page 2 of 3 (67 Total Records)