WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
metamagic
Published
2026-05-26
Title
MetaMagic SEO Plugin <= 1.6 - Cross-Site Request Forgery to Plugin Settings Update via Settings Page
Slug
metasync
Published
2024-09-30
Title
Search Atlas SEO < 1.8.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
metasync
Published
2025-09-22
Title
Search Atlas SEO < 2.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
metasync
Published
2026-01-27
Title
Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization 2.4.4 - 2.5.15 - Missing Authorization to Authenticated (Subscriber+) Authentication Bypass via Account Takeover
Slug
metasync
Published
2026-07-01
Title
Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization < 2.6.7 - Reflected Cross-Site Scripting
Slug
metasync
Published
2026-07-10
Title
Search Atlas SEO < 2.6.12 - Subscriber+ Google Indexing API Access
Slug
meteor-slides
Published
2022-12-28
Title
Meteor Slides < 1.5.7 - Contributor+ Stored XSS
Slug
meteor-slides
Published
2024-11-20
Title
Meteor Slides <= 1.5.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
meteor-slides
Published
2025-01-06
Title
Meteor Slides <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
metform
Published
2022-04-23
Title
Metform Elementor Contact Form Builder < 2.1.4 - Unauthenticated API keys and Secrets Disclosure
Slug
metform
Published
2023-02-03
Title
Metform Elementor Contact Form Builder < 3.2.0 - Unauthenticated Stored XSS
Slug
metform
Published
2023-03-02
Title
Metform Elementor Contact Form Builder < 3.2.2 - reCaptcha Bypass
Slug
metform
Published
2023-06-08
Title
Metform Elementor Contact Form Builder < 3.3.2 - Multiple Subscriber+ Sensitive Information Disclosure Issues
Slug
metform
Published
2023-06-08
Title
Metform Elementor Contact Form Builder < 3.3.1 - Unauthenticated CSV Injection
Slug
metform
Published
2023-06-08
Title
Metform Elementor Contact Form Builder < 3.3.1 - Multiple Contributor+ Stored XSS via Shortcode
Slug
metform
Published
2023-05-04
Title
Metform Elementor Contact Form Builder < 3.3.2 - Unauthenticated Permalink Structure Update
Slug
metform
Published
2023-06-22
Title
Metform Elementor Contact Form Builder < 3.3.3 - Cross-Site Request Forgery
Slug
metform
Published
2023-08-30
Title
Metform Elementor Contact Form Builder < 3.3.2 - Authenticated (Subscriber+) Information Disclosure via 'mf_first_name' shortcode
Slug
metform
Published
2024-01-08
Title
Metform Elementor Contact Form Builder < 3.8.2 - Cross-Site Request Forgery
Slug
metform
Published
2024-03-07
Title
Metform Elementor Contact Form Builder < 3.8.4 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
metform
Published
2024-04-01
Title
Metform Elementor Contact Form Builder < 3.8.6 - Contributor+ Stored XSS
Slug
metform
Published
2024-04-25
Title
Metform Elementor Contact Form Builder < 3.8.4 - Missing Authorization to Notice Dismissal
Slug
metform
Published
2024-06-10
Title
MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor < 3.8.9 - Unauthenticated Sensitive Information Exposure
Slug
metform
Published
2024-08-16
Title
Metform Elementor Contact Form Builder < 3.3.0 - Unauthenticated Double-Extension Arbitrary File Upload
Slug
metform
Published
2025-03-27
Title
Metform < 3.9.3 - Admin+ SSRF