| CVE-2026-86833 |
The MetForm WordPress plugin before 4.3.1 does not sanitize or escape submitted form-field values before inserting…
|
5.4
Medium
|
Oct 7, 2026 |
| CVE-2026-86834 |
The MetForm WordPress plugin before 4.3.1 does not properly restrict access to a debug file it writes to the web root…
|
3.7
Low
|
Oct 3, 2026 |
| CVE-2026-86832 |
The MetForm WordPress plugin before 4.3.1 does not properly restrict access to form submission data, allowing…
|
5.3
Medium
|
Oct 3, 2026 |
| CVE-2026-86813 |
The MetForm WordPress plugin before 4.1.9 does not properly neutralize newline characters in user-submitted values…
|
4.8
Medium
|
Sep 11, 2026 |