Unknown MetForm

• CVE-2026-86833 Medium 5.4 MetForm < 4.3.1 - Unauthenticated HTML Injection in Notification Emails via Field Shortcodes 0.2%
• CVE-2026-86834 Low 3.7 MetForm 2.2.1 - 4.3.0 - Unauthenticated Debug File Disclosure via HubSpot Forms Integration 0.2%
• CVE-2026-86832 Medium 5.3 MetForm < 4.3.1 - Unauthenticated Form Entry Data Disclosure via REST API 0.2%
• CVE-2026-86813 Medium 4.8 MetForm < 4.1.9 - Unauthenticated Email Header Injection via Notification Reply-To 0.2%