roxnor Metform vulnerabilities

Latest roxnor Metform CVEs

Newest publication first

1. CVE-2025-30914 WordPress Metform Elementor Contact Form Builder plugin <= 3.9.7 - Server Side Request Forgery (SSRF) vulnerability

   Published 2025-03-27

   Medium·CVSS 4.4 EPSS 0.27%

   Server-Side Request Forgery (SSRF) vulnerability in Roxnor Metform metform allows Server Side Request Forgery.This issue affects Metform: from n/a through <= 3.9.2.

2. CVE-2023-50903 WordPress Metform Elementor Contact Form Builder plugin <= 3.4.0 - Broken Access Control vulnerability

   Published 2024-12-09

   Critical·CVSS 9.8 EPSS 0.62%

   Missing Authorization vulnerability in Roxnor Metform metform allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Metform: from n/a through <= 3.4.0.

3. CVE-2024-33570 WordPress MetForm plugin <= 3.8.3 - Broken Access Control vulnerability

   Published 2024-05-06

   High·CVSS 8.8 EPSS 0.44%

   Missing Authorization vulnerability in Roxnor Metform metform.This issue affects Metform: from n/a through <= 3.8.3.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.