agentprime: roxnor-metform-contact-form-survey-quiz-custom-form-builder-for-elementorEvery new CVE for roxnor-metform-contact-form-survey-quiz-custom-form-builder-for-elementor.https://agentprime.io/CVE-2026-0633: MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor <= 4.1.0 - Unauthenticated Form Submission Exposure via Forgeable Cookie Valuehttps://agentprime.io/advisories/CVE-2026-0633/https://agentprime.io/advisories/CVE-2026-0633/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Sat, 24 Jan 2026 08:26:35 GMTCVECVE-2025-5684: MetForm <= 4.0.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via `mf-template` DOM Elementhttps://agentprime.io/advisories/CVE-2025-5684/https://agentprime.io/advisories/CVE-2025-5684/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Jul 2025 19:42:33 GMTCVECVE-2023-0714: Metform Elementor Contact Form Builder <= 3.2.4 - Unauthenticated Double-Extension Arbitrary File Uploadhttps://agentprime.io/advisories/CVE-2023-0714/https://agentprime.io/advisories/CVE-2023-0714/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 17 Aug 2024 09:38:58 GMTCVECVE-2024-4266: MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor <= 3.8.8 - Unauthenticated Sensitive Information Exposurehttps://agentprime.io/advisories/CVE-2024-4266/https://agentprime.io/advisories/CVE-2024-4266/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Jun 2024 07:32:25 GMTCVECVE-2024-2791: Metform Elementor Contact Form Builder <= 3.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widgetshttps://agentprime.io/advisories/CVE-2024-2791/https://agentprime.io/advisories/CVE-2024-2791/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 02 Apr 2024 05:32:49 GMTCVECVE-2024-1585: Metform Elementor Contact Form Builder <= 3.8.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcodehttps://agentprime.io/advisories/CVE-2024-1585/https://agentprime.io/advisories/CVE-2024-1585/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 Mar 2024 15:26:42 GMTCVECVE-2023-6788: Metform Elementor Contact Form Builder <= 3.8.1 - Cross-Site Request Forgeryhttps://agentprime.io/advisories/CVE-2023-6788/https://agentprime.io/advisories/CVE-2023-6788/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Jan 2024 03:31:31 GMTCVECVE-2023-0689: Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via 'mf_first_name' shortcodehttps://agentprime.io/advisories/CVE-2023-0689/https://agentprime.io/advisories/CVE-2023-0689/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 31 Aug 2023 05:33:05 GMTCVECVE-2023-2517: Metform Elementor Contact Form Builder <= 3.3.2 - Cross-Site Request Forgery via permalink_setuphttps://agentprime.io/advisories/CVE-2023-2517/https://agentprime.io/advisories/CVE-2023-2517/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Jul 2023 04:38:49 GMTCVECVE-2023-0692: Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via 'mf_payment_status' shortcodehttps://agentprime.io/advisories/CVE-2023-0692/https://agentprime.io/advisories/CVE-2023-0692/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Jun 2023 05:33:36 GMTCVECVE-2023-0721: Metform Elementor Contact Form Builder <= 3.3.0 - Unauthenticated CSV Injectionhttps://agentprime.io/advisories/CVE-2023-0721/https://agentprime.io/advisories/CVE-2023-0721/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Jun 2023 05:33:33 GMTCVECVE-2023-0708: Metform Elementor Contact Form Builder <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via mf_first_name shortcodehttps://agentprime.io/advisories/CVE-2023-0708/https://agentprime.io/advisories/CVE-2023-0708/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Jun 2023 05:33:27 GMTCVECVE-2023-0691: Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via mf_last_name shortcodehttps://agentprime.io/advisories/CVE-2023-0691/https://agentprime.io/advisories/CVE-2023-0691/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Jun 2023 05:33:23 GMTCVECVE-2023-0710: Metform Elementor Contact Form Builder <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via mf_thankyou shortcodehttps://agentprime.io/advisories/CVE-2023-0710/https://agentprime.io/advisories/CVE-2023-0710/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Jun 2023 05:33:23 GMTCVECVE-2023-0688: Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via mf_thankyou shortcodehttps://agentprime.io/advisories/CVE-2023-0688/https://agentprime.io/advisories/CVE-2023-0688/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Jun 2023 05:33:22 GMTCVECVE-2023-1843: Metform Elementor Contact Form Builder <= 3.3.0 - Missing Authorizationhttps://agentprime.io/advisories/CVE-2023-1843/https://agentprime.io/advisories/CVE-2023-1843/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Jun 2023 05:33:18 GMTCVECVE-2023-0709: Metform Elementor Contact Form Builder <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via mf_last_name shortcodehttps://agentprime.io/advisories/CVE-2023-0709/https://agentprime.io/advisories/CVE-2023-0709/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Jun 2023 05:33:13 GMTCVECVE-2023-0693: Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via 'mf_transaction_id' shortcodehttps://agentprime.io/advisories/CVE-2023-0693/https://agentprime.io/advisories/CVE-2023-0693/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Jun 2023 05:33:12 GMTCVECVE-2023-0695: Metform Elementor Contact Form Builder <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via mf shortcodehttps://agentprime.io/advisories/CVE-2023-0695/https://agentprime.io/advisories/CVE-2023-0695/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Jun 2023 05:33:12 GMTCVECVE-2023-0694: Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via mf shortcodehttps://agentprime.io/advisories/CVE-2023-0694/https://agentprime.io/advisories/CVE-2023-0694/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Jun 2023 05:33:12 GMTCVECVE-2023-0084: Metform Elementor Contact Form Builder <= 3.1.2 - Unauthenticated Stored Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2023-0084/https://agentprime.io/advisories/CVE-2023-0084/CVSS 7.2 (High). Critical: CVSS score 7.2 (7.0 or more) and EPSS 0.29 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Thu, 02 Mar 2023 18:35:22 GMTCVEcriticalCVE-2023-0085: Metform Elementor Contact Form Builder <= 3.2.1 - reCaptcha Protection Bypasshttps://agentprime.io/advisories/CVE-2023-0085/https://agentprime.io/advisories/CVE-2023-0085/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 02 Mar 2023 16:01:14 GMTCVECVE-2022-1442: Metform Elementor Contact Form Builder <= 2.1.3 - Sensitive Information Disclosurehttps://agentprime.io/advisories/CVE-2022-1442/https://agentprime.io/advisories/CVE-2022-1442/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 May 2022 19:30:12 GMTCVE