PLUGIN SECURITY
Is Metform safe?
Known vulnerabilities, PHP compatibility and safer alternatives for the Metform WordPress plugin — checked against WP Clinic's local security database.
Plugin details
- Slug:
metform
Known vulnerabilities
- CVE-2022-1442 — MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor [metform] < 3.2.0 (Missing Authorization) · High
- CVE-2023-0084 — MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor [metform] < 3.2.0 (XSS) · Medium
- CVE-2023-0085 — MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor [metform] < 3.2.2 (CWE-693) · Medium
- CVE-2023-1843 — MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor [metform] < 3.3.1 (Missing Authorization) · Medium
- CVE-2023-0691 — MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor [metform] < 3.3.2 (CWE-639) · Medium
+ 21 more known vulnerabilities
- CVE-2023-0693 — MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor [metform] < 3.3.2 (CWE-639) · Medium
- CVE-2023-0694 — MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor [metform] < 3.3.2 (CWE-639) · Medium
- CVE-2023-0688 — MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor [metform] < 3.3.2 (CWE-639) · Medium
- CVE-2023-0710 — MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor [metform] < 3.3.1 (XSS) · Medium
- CVE-2023-0709 — MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor [metform] < 3.3.1 (XSS) · Medium
- CVE-2023-0692 — MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor [metform] < 3.3.2 (CWE-639) · Medium
- CVE-2023-0721 — MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor [metform] < 3.3.1 (CWE-1236) · High
- CVE-2023-0708 — MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor [metform] < 3.3.1 (XSS) · Medium
- CVE-2023-0695 — MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor [metform] < 3.3.1 (XSS) · Medium
- CVE-2023-2517 — MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor [metform] < 3.3.3 (CSRF) · Medium
- CVE-2023-0689 — MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor [metform] < 3.3.2 (CWE-639) · Medium
- CVE-2023-50903 — MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor [metform] < 3.4.1 (Missing Authorization) · Medium
- CVE-2023-6788 — MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor [metform] < 3.8.2 (CSRF) · Medium
- CVE-2024-1585 — MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor [metform] < 3.8.4 (XSS) · Medium
- CVE-2024-2791 — MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor [metform] < 3.8.6 (XSS) · Medium
- CVE-2024-33570 — MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor [metform] < 3.8.4 (Missing Authorization) · Medium
- CVE-2024-4266 — MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor [metform] < 3.8.9 (CWE-200) · High
- CVE-2023-0714 — MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor [metform] < 3.3.0 (Unrestricted File Upload) · Critical
- CVE-2025-30914 — MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor [metform] < 3.9.3 (SSRF) · Medium
- CVE-2025-5684 — MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor [metform] < 4.0.2 (XSS) · Medium
- CVE-2026-0633 — MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor [metform] < 4.1.1 · Low
Vulnerabilities are matched against the exact installed version when it's known. Always keep the plugin updated to the latest release.
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.