Vulnerabilities > Wpmet > High

DATE CVE VULNERABILITY TITLE RISK
2024-05-17 CVE-2024-21746 Unspecified vulnerability in Wpmet WP Ultimate Review
Authentication Bypass by Spoofing vulnerability in Wpmet Wp Ultimate Review allows Functionality Bypass.This issue affects Wp Ultimate Review: from n/a through 2.3.2.
network
low complexity
wpmet
7.5
2024-04-22 CVE-2024-32684 Unspecified vulnerability in Wpmet WP Ultimate Review
Missing Authorization vulnerability in Wpmet Wp Ultimate Review.This issue affects Wp Ultimate Review: from n/a through 2.2.5.
network
low complexity
wpmet
7.5
2024-04-19 CVE-2024-32683 Unspecified vulnerability in Wpmet WP Ultimate Review
Authorization Bypass Through User-Controlled Key vulnerability in Wpmet Wp Ultimate Review.This issue affects Wp Ultimate Review: from n/a through 2.2.5.
network
low complexity
wpmet
7.5
2023-11-12 CVE-2023-28987 Unspecified vulnerability in Wpmet WP Ultimate Review
Cross-Site Request Forgery (CSRF) vulnerability in Wpmet Wp Ultimate Review plugin <= 2.0.3 versions.
network
low complexity
wpmet
8.8
2023-10-22 CVE-2023-46085 Unspecified vulnerability in Wpmet WP Ultimate Review
Cross-Site Request Forgery (CSRF) vulnerability in Wpmet Wp Ultimate Review plugin <= 2.2.4 versions.
network
low complexity
wpmet
8.8
2023-06-09 CVE-2023-0721 Unspecified vulnerability in Wpmet Metform Elementor Contact Form Builder
The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to CSV injection in versions up to, and including, 3.3.0.
local
low complexity
wpmet
7.8
2023-05-25 CVE-2022-45371 Unspecified vulnerability in Wpmet Shopengine 4.1.1
Cross-Site Request Forgery (CSRF) vulnerability in Wpmet ShopEngine plugin <= 4.1.1 versions.
network
low complexity
wpmet
8.8
2022-05-10 CVE-2022-1442 Missing Authorization vulnerability in Wpmet Metform Elementor Contact Form Builder
The Metform WordPress plugin is vulnerable to sensitive information disclosure due to improper access control in the ~/core/forms/action.php file which can be exploited by an unauthenticated attacker to view all API keys and secrets of integrated third-party APIs like that of PayPal, Stripe, Mailchimp, Hubspot, HelpScout, reCAPTCHA and many more, in versions up to and including 2.1.3.
network
low complexity
wpmet CWE-862
7.5