CVE-2025-30914

The MetForm plugin for WordPress contains a security flaw in versions up to 3.9.2 that allows malicious users with elevated privileges to initiate unauthorized external network connections on behalf of the website, potentially exposing sensitive data or disrupting internal systems. This vulnerability can be exploited by authenticated attackers who have Administrator-level access or higher. As a result, an attacker could use this weakness to probe and manipulate internal services.

Based on public CVE data (MITRE/NVD).