همهٔ محصولات
metform
WordPress · افزونه33 گزارش| گزارش | محصول | اکوسیستم | شدت | وضعیت اصلاح | آخرین تغییر |
|---|
| MetForm – Contact Form, Survey, Quiz, Conditional Forms, Form Templates & Custom Form Builder for Elementor <= 4.3.2 - Missing AuthorizationCVE-2026-114180 |
metform |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| MetForm <= 4.3.0 - Unauthenticated Arbitrary HTML Injection in Notification EmailsCVE-2026-86833 |
metform |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| MetForm 2.2.1 - 4.3.0 - Unauthenticated Information ExposureCVE-2026-86834 |
metform |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| MetForm <= 4.3.0 - Unauthenticated Information ExposureCVE-2026-86832 |
metform |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| MetForm – Contact Form, Survey, Quiz, Conditional Forms, Form Templates & Custom Form Builder for Elementor <= 4.3.0 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2026-103339 |
metform |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| MetForm – Contact Form, Survey, Quiz, Conditional Forms, Form Templates & Custom Form Builder for Elementor < 4.1.9 - Unauthenticated Email Header InjectionCVE-2026-86813 |
metform |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| MetForm <= 4.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'mf_form_id' Widget SettingCVE-2026-18100 |
metform |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor <= 4.1.0 - Unauthenticated Form Submission Exposure via Forgeable Cookie ValueCVE-2026-0633 |
metform |
WordPress |
کم
|
اصلاح گزارش شده |
|
| MetForm <= 4.0.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via `mf-template` DOM ElementCVE-2025-5684 |
metform |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| Metform <= 3.9.2 - Authenticated (Admin+) Server-Side Request ForgeryCVE-2025-30914 |
metform |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| Metform Elementor Contact Form Builder <= 3.2.4 - Unauthenticated Double-Extension Arbitrary File UploadCVE-2023-0714 |
metform |
WordPress |
زیاد
|
اصلاح گزارش شده |
|
| Metform Elementor Contact Form Builder <= 3.8.1 - Cross-Site Request ForgeryCVE-2023-6788 |
metform |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor <= 3.8.8 - Unauthenticated Sensitive Information ExposureCVE-2024-4266 |
metform |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| Metform Elementor Contact Form Builder <= 3.8.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2024-1585 |
metform |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| Metform Elementor Contact Form Builder <= 3.8.3 - Missing Authorization to Notice DismissalCVE-2024-33570 |
metform |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| Metform Elementor Contact Form Builder <= 3.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via WidgetsCVE-2024-2791 |
metform |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via 'mf_payment_status' shortcodeCVE-2023-0692 |
metform |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| Metform Elementor Contact Form Builder <= 3.3.0 - Unauthenticated CSV InjectionCVE-2023-0721 |
metform |
WordPress |
زیاد
|
اصلاح گزارش شده |
|
| Metform Elementor Contact Form Builder <= 3.3.2 - Cross-Site Request Forgery via permalink_setupCVE-2023-2517 |
metform |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| Metform Elementor Contact Form Builder <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via mf_first_name shortcodeCVE-2023-0708 |
metform |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
