PatchTheCVEwpmet vulnerabilities
Recent CVEs affecting wpmet products. 38 tracked.
wpmet has 38 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 38. Most recent: 2025-07-24. Highest priority: CVE-2024-2047 (score 49/100).
- CVE-2025-46253 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ataur R
- CVE-2025-3614 MEDIUM 6.4 UPGRADE The ElementsKit Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripti
- CVE-2025-1506 MEDIUM 4.3 UPGRADE The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to Cross-Site Request Forge
- CVE-2025-1005 MEDIUM 6.4 UPGRADE The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plu
- CVE-2025-0321 MEDIUM 6.4 UPGRADE The ElementsKit Pro plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the ‘url’
- CVE-2024-8546 MEDIUM 6.4 UPGRADE The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plu
- CVE-2024-7064 MEDIUM 6.4 UPGRADE The ElementsKit Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters i
- CVE-2024-7063 MEDIUM 4.3 UPGRADE The ElementsKit Pro plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to
- CVE-2024-6698 HIGH 8.8 UPGRADE The FundEngine plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including
- CVE-2024-6455 MEDIUM 5.3 UPGRADE The ElementsKit Elementor addons plugin for WordPress is vulnerable to Information Exposure in all versions up
- CVE-2024-5263 MEDIUM 6.4 UPGRADE The ElementsKit Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Motion
- CVE-2024-4452 MEDIUM 6.4 UPGRADE The ElementsKit Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter
- CVE-2024-4404 HIGH 8.5 UPGRADE The ElementsKit PRO plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and i
- CVE-2024-4266 MEDIUM 5.3 UPGRADE The MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor plugin for WordPress is vulnerab
- CVE-2024-43996 MEDIUM 6.5 UPGRADE Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ElementsKit El
- CVE-2024-3650 MEDIUM 6.4 UPGRADE The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Ima
- CVE-2024-3598 MEDIUM 6.4 UPGRADE The ElementsKit Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Creativ
- CVE-2024-3500 HIGH 8.8 UPGRADE The ElementsKit Pro plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and incl
- CVE-2024-3499 HIGH 8.8 UPGRADE The ElementsKit Elementor addons plugin for WordPress is vulnerable to Local File Inclusion in all versions up
- CVE-2024-37255 MEDIUM 5.3 UPGRADE Missing Authorization vulnerability in Roxnor ElementsKit Elementor addons Lite elementskit-lite.This issue af
- CVE-2024-33570 MEDIUM 4.3 UPGRADE Missing Authorization vulnerability in Roxnor Metform metform.This issue affects Metform: from n/a through <=
- CVE-2024-32685 MEDIUM 5.3 UPGRADE Client-Side Enforcement of Server-Side Security vulnerability in Wpmet Wp Ultimate Review allows Functionality
- CVE-2024-32684 MEDIUM 5.3 UPGRADE Missing Authorization vulnerability in Wpmet Wp Ultimate Review.This issue affects Wp Ultimate Review: from n/
- CVE-2024-32683 MEDIUM 5.3 UPGRADE Authorization Bypass Through User-Controlled Key vulnerability in Wpmet Wp Ultimate Review.This issue affects
- CVE-2024-32505 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Roxnor E
- CVE-2024-2803 MEDIUM 6.4 UPGRADE The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the cou
- CVE-2024-2791 MEDIUM 6.4 UPGRADE The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting v
- CVE-2024-2047 HIGH 8.8 UPGRADE The ElementsKit Elementor addons plugin for WordPress is vulnerable to Local File Inclusion in all versions up
- CVE-2024-21746 MEDIUM 5.3 UPGRADE Authentication Bypass by Spoofing vulnerability in Roxnor Wp Ultimate Review wp-ultimate-review allows Identit
- CVE-2024-1763 MEDIUM 6.5 UPGRADE The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to unauthorized modificatio
- CVE-2024-1585 MEDIUM 6.4 UPGRADE The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting v
- CVE-2024-1238 MEDIUM 6.4 UPGRADE The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the but
- CVE-2024-11180 MEDIUM 6.4 UPGRADE The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Cou
- CVE-2024-10091 MEDIUM 6.4 UPGRADE The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Ima
- CVE-2023-50903 MEDIUM 5.3 UPGRADE Missing Authorization vulnerability in Roxnor Metform metform allows Exploiting Incorrectly Configured Access
- CVE-2023-39993 MEDIUM 4.3 UPGRADE Missing Authorization vulnerability in Wpmet Elements kit Elementor addons.This issue affects Elements kit Ele
- CVE-2023-0714 HIGH 8.1 UPGRADE The Metform Elementor Contact Form Builder for WordPress is vulnerable to Arbitrary File Upload due to insuffi
- CVE-2022-47160 MEDIUM 6.5 UPGRADE Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wpmet Wp Social Login and Register
FAQ
How do I fix wpmet vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is wpmet being exploited right now?
None of the tracked wpmet CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which wpmet CVE should I patch first?
CVE-2024-2047 currently ranks highest (49/100): The ElementsKit Elementor addons plugin for WordPress is vulnerable to Local File Inclusion in all versions up.