What’s Vulnerable › Products

WPMet MetForm Pro vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your WPMet MetForm Pro version is affected

Latest WPMet MetForm Pro vulnerabilities

• CVE-2026-24611 — WordPress MetForm Pro plugin <= 3.9.1 - Broken Access Control vulnerability (CVSS 9.1)
• CVE-2026-24610 — WordPress MetForm Pro plugin <= 3.9.1 - Broken Access Control vulnerability (CVSS 4.3)
• CVE-2026-1782 — MetForm Pro <= 3.9.7 - Unauthenticated Payment Amount Manipulation via 'mf-calculation' (CVSS 5.3)
• CVE-2026-1261 — MetForm Pro <= 3.9.6 - Unauthenticated Stored Cross-Site Scripting (CVSS 7.2)