What’s Vulnerable › Products

MetForm vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your MetForm version is affected

Latest MetForm vulnerabilities

• CVE-2026-86833 — MetForm < 4.3.1 - Unauthenticated HTML Injection in Notification Emails via Field Shortcodes (CVSS 5.4)
• CVE-2026-86834 — MetForm 2.2.1 - 4.3.0 - Unauthenticated Debug File Disclosure via HubSpot Forms Integration (CVSS 3.7)
• CVE-2026-86832 — MetForm < 4.3.1 - Unauthenticated Form Entry Data Disclosure via REST API (CVSS 5.3)
• CVE-2026-86813 — MetForm < 4.1.9 - Unauthenticated Email Header Injection via Notification Reply-To (CVSS 4.8)