medium5.3
CVE-2026-86832
The MetForm WordPress plugin before 4.3.1 does not properly restrict access to form submission data, allowing unauthenticated attackers to view submitter infor…
Impact
The MetForm WordPress plugin before 4.3.1 does not properly restrict access to form submission data, allowing unauthenticated attackers to view submitter information through the REST API.
Affected products
| Product | Affected versions |
|---|---|
| MetForm WordPress Plugin | before 4.3.1 |
Versions were read from the advisory text. No structured product data has been published for this record yet.