Vulnerabilities > Wpmet > Metform Elementor Contact Form Builder > Critical

DATE CVE VULNERABILITY TITLE RISK
2024-12-09 CVE-2023-50903 Unspecified vulnerability in Wpmet Metform Elementor Contact Form Builder
Missing Authorization vulnerability in Wpmet Metform Elementor Contact Form Builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Metform Elementor Contact Form Builder: from n/a through 3.4.0.
network
low complexity
wpmet
critical
9.8
2024-08-17 CVE-2023-0714 Unrestricted Upload of File with Dangerous Type vulnerability in Wpmet Metform Elementor Contact Form Builder
The Metform Elementor Contact Form Builder for WordPress is vulnerable to Arbitrary File Upload due to insufficient file type validation in versions up to, and including, 3.2.4.
network
low complexity
wpmet CWE-434
critical
9.8