Log in Start free

WPMet

Products

ProductCVEsExploitedLatest
ElementsKit Pro9–Aug 28, 2026
Wp Ultimate Review6–May 17, 2024
MetForm Pro4–Jun 17, 2026
ElementsKit Elementor addons Lite4–Oct 1, 2026
Metform3–Nov 7, 2026
GetGenie1–Jun 16, 2026
Elements kit Elementor addons1–Jun 19, 2024
Elements Kit Pro1–May 5, 2021
ShopEngine1–May 25, 2023
WP Fundraising Donation and Crowdfunding Platform1–Jun 11, 2024
Wp Social1–Nov 7, 2026
Wp Social Login and Register Social Counter1–Jan 19, 2024
Elements Kit Lite1–May 5, 2021

Exploited and recent CVEs

  • CVE-2026-120847 Medium 4.3 WordPress Metform plugin <= 4.3.3 - Broken Access Control vulnerability –
  • CVE-2026-122675 Medium 5.4 WordPress Wp Social plugin <= 3.2.3 - Cross Site Request Forgery (CSRF) vulnerability –
  • CVE-2026-114180 Medium 5.3 WordPress Metform plugin <= 4.3.2 - Broken Access Control vulnerability 0.2%
  • CVE-2026-103339 Medium 6.5 WordPress Metform plugin <= 4.3.0 - Cross Site Scripting (XSS) vulnerability 0.1%
  • CVE-2026-103063 Medium 6.5 WordPress ElementsKit Elementor addons Lite plugin <= 4.0.6 - Cross Site Scripting (XSS) vulnerability 0.1%
  • CVE-2026-103064 Medium 6.5 WordPress ElementsKit Elementor addons Lite plugin <= 4.0.6 - Cross Site Scripting (XSS) vulnerability 0.1%
  • CVE-2026-4246 Medium 6.1 ElementsKit Pro <= 4.10.1 - Unauthenticated Stored Cross-Site Scripting via 's' Parameter 0.4%
  • CVE-2026-24611 Critical 9.1 WordPress MetForm Pro plugin <= 3.9.1 - Broken Access Control vulnerability 0.4%
  • CVE-2026-24610 Medium 4.3 WordPress MetForm Pro plugin <= 3.9.1 - Broken Access Control vulnerability 0.2%
  • CVE-2026-54197 Medium 6.5 WordPress GetGenie plugin <= 4.4.1 - Sensitive Data Exposure vulnerability 0.3%
  • CVE-2026-49053 Medium 5.3 WordPress ElementsKit Elementor addons Lite plugin <= 3.9.6 - Broken Access Control vulnerability 0.2%
  • CVE-2026-49052 Medium 4.3 WordPress ElementsKit Elementor addons Lite plugin <= 3.9.6 - Broken Access Control vulnerability 0.2%
  • CVE-2026-1782 Medium 5.3 MetForm Pro <= 3.9.7 - Unauthenticated Payment Amount Manipulation via 'mf-calculation' 0.3%
  • CVE-2026-1261 High 7.2 MetForm Pro <= 3.9.6 - Unauthenticated Stored Cross-Site Scripting 0.4%
  • CVE-2025-0321 Medium 6.4 ElementsKit Pro <= 3.7.8 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via url Parameter 0.3%
  • CVE-2024-7063 Medium 4.3 ElementsKit Pro <= 3.6.6 - Authenticated (Contributor+) Sensitive Information Exposure 0.4%
  • CVE-2024-7064 Medium 6.4 ElementsKit Pro <= 3.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
  • CVE-2023-39993 Medium 4.3 WordPress ElementsKit Lite plugin <= 2.9.0 - Broken Access Control vulnerability 0.4%
  • CVE-2024-5263 Medium 6.4 ElementsKit Elementor addons and Templates Library <= 3.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Motion Text and Table Widgets 0.3%
  • CVE-2024-4404 High 8.5 ElementsKit PRO <= 3.6.1 - Authenticated (Contributor+) Server-Side Request Forgery 0.3%
  • CVE-2024-34758 Medium 5.3 WordPress FundEngine – Donation and Crowdfunding Platform plugin <= 1.6.4 - Broken Access Control vulnerability 0.4%
  • CVE-2024-4452 Medium 6.4 ElementsKit Pro <= 3.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
  • CVE-2024-32685 Medium 5.3 WordPress WP Ultimate Review plugin <= 2.2.5 - Review Score Manipulation vulnerability 0.4%
  • CVE-2024-3500 High 8.8 ElementsKit Pro <= 3.6.0 - Authenticated (Contributor+) Local File Inclusion via Price Menu, Hotspot, and Advanced Toggle Widgets 1.1%
  • CVE-2024-32684 Medium 5.3 WordPress WP Ultimate Review plugin <= 2.2.5 - Broken Access Control on Review vulnerability 0.4%
  • CVE-2024-32683 Medium 5.3 WordPress WP Ultimate Review plugin <= 2.2.5 - Insecure Direct Object References (IDOR) vulnerability 0.5%
  • CVE-2024-3598 Medium 6.4 ElementsKit Pro <= 3.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'ekit_btn_id' 0.3%
  • CVE-2022-47160 Medium 6.5 WordPress Wp Social Plugin <= 1.9.0 is vulnerable to Sensitive Data Exposure 0.6%
  • CVE-2023-28987 Medium 4.3 WordPress Wp Ultimate Review Plugin <= 2.0.3 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%
  • CVE-2023-46085 Medium 4.3 WordPress Wp Ultimate Review Plugin <= 2.2.4 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%