{"api_version":"v1","generated_at":"2026-10-10T08:00:00+00:00","product":{"cve_count":23,"evidence_gap_note":"This identity is present in BlackTree CVE records, but no product-specific publisher support or retirement history is currently registered in Lifecycle.","id":"security:cve-roxnor-metform-contact-form-survey-quiz-and-custom-form-builder-for-elementor-3ac903f7e051","lifecycle_state":"evidence_gap","linked_lifecycle_url":null,"name":"MetForm \u2013 Contact Form, Survey, Quiz, & Custom Form Builder for Elementor","next_cursor":null,"observations":[{"affected":"\u2264 4.1.0","affected_versions_present":true,"cve_id":"CVE-2026-0633","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-0633","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-08T17:26:32.469Z","patch_url":"","primary_source":"","published":"2026-01-24T08:26:35.777Z"},{"affected":"\u2264 4.0.1","affected_versions_present":true,"cve_id":"CVE-2025-5684","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-5684","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-08T17:02:58.735Z","patch_url":"","primary_source":"","published":"2025-07-29T19:42:33.941Z"},{"affected":"\u2264 3.2.4","affected_versions_present":true,"cve_id":"CVE-2023-0714","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-0714","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-04-08T16:58:39.519Z","patch_url":"https://plugins.trac.wordpress.org/changeset/2896914/","primary_source":"","published":"2024-08-17T09:38:58.449Z"},{"affected":"\u2264 3.8.8","affected_versions_present":true,"cve_id":"CVE-2024-4266","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-4266","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-04-08T17:06:28.656Z","patch_url":"https://plugins.trac.wordpress.org/changeset/3099977/","primary_source":"","published":"2024-06-11T07:32:25.511Z"},{"affected":"\u2264 3.8.5","affected_versions_present":true,"cve_id":"CVE-2024-2791","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-2791","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-04-08T16:35:19.143Z","patch_url":"https://plugins.trac.wordpress.org/changeset/3061715/metform/trunk/widgets/file-upload/file-upload.php","primary_source":"","published":"2024-04-02T05:32:49.050Z"},{"affected":"\u2264 3.8.3","affected_versions_present":true,"cve_id":"CVE-2024-1585","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-1585","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-04-08T16:45:41.741Z","patch_url":"https://plugins.trac.wordpress.org/changeset?old_path=/metform/tags/3.8.3&old=3047398&new_path=/metform/tags/3.8.4&new=3047398&sfp_email=&sfph_mail=","primary_source":"","published":"2024-03-13T15:26:42.210Z"},{"affected":"\u2264 3.8.1","affected_versions_present":true,"cve_id":"CVE-2023-6788","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-6788","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-04-08T16:44:58.720Z","patch_url":"https://plugins.trac.wordpress.org/browser/metform/trunk/core/integrations/crm/hubspot/loader.php#L87","primary_source":"","published":"2024-01-09T03:31:31.315Z"},{"affected":"\u2264 3.3.1","affected_versions_present":true,"cve_id":"CVE-2023-0689","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-0689","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-04-08T16:45:56.665Z","patch_url":"https://plugins.trac.wordpress.org/changeset/2910040/","primary_source":"","published":"2023-08-31T05:33:05.767Z"},{"affected":"\u2264 3.3.2","affected_versions_present":true,"cve_id":"CVE-2023-2517","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-2517","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-04-08T17:22:09.867Z","patch_url":"https://plugins.trac.wordpress.org/changeset/2907471/metform/trunk?contextall=1&old=2896914&old_path=%2Fmetform%2Ftrunk","primary_source":"","published":"2023-07-12T04:38:49.547Z"},{"affected":"\u2264 3.3.1","affected_versions_present":true,"cve_id":"CVE-2023-0692","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-0692","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-04-08T17:28:11.026Z","patch_url":"https://plugins.trac.wordpress.org/browser/metform/trunk/base/shortcode.php?rev=2845078","primary_source":"","published":"2023-06-09T05:33:36.880Z"},{"affected":"\u2264 3.3.0","affected_versions_present":true,"cve_id":"CVE-2023-0721","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-0721","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-04-08T17:23:54.553Z","patch_url":"https://plugins.trac.wordpress.org/browser/metform/trunk/core/entries/export.php?rev=2845078","primary_source":"","published":"2023-06-09T05:33:33.988Z"},{"affected":"\u2264 3.3.0","affected_versions_present":true,"cve_id":"CVE-2023-0708","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-0708","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-04-08T17:15:23.859Z","patch_url":"https://plugins.trac.wordpress.org/browser/metform/trunk/base/shortcode.php?rev=2845078","primary_source":"","published":"2023-06-09T05:33:27.746Z"},{"affected":"\u2264 3.3.1","affected_versions_present":true,"cve_id":"CVE-2023-0691","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-0691","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-04-08T17:06:38.253Z","patch_url":"https://plugins.trac.wordpress.org/browser/metform/trunk/base/shortcode.php?rev=2845078","primary_source":"","published":"2023-06-09T05:33:23.964Z"},{"affected":"\u2264 3.3.0","affected_versions_present":true,"cve_id":"CVE-2023-0710","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-0710","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-04-08T17:05:31.693Z","patch_url":"https://plugins.trac.wordpress.org/browser/metform/trunk/base/shortcode.php?rev=2845078","primary_source":"","published":"2023-06-09T05:33:23.543Z"},{"affected":"\u2264 3.3.1","affected_versions_present":true,"cve_id":"CVE-2023-0688","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-0688","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-04-08T17:03:51.667Z","patch_url":"https://plugins.trac.wordpress.org/browser/metform/trunk/base/shortcode.php?rev=2845078","primary_source":"","published":"2023-06-09T05:33:22.696Z"},{"affected":"\u2264 3.3.0","affected_versions_present":true,"cve_id":"CVE-2023-1843","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-1843","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-04-08T16:55:59.033Z","patch_url":"https://plugins.trac.wordpress.org/browser/metform/trunk/plugin.php#L544","primary_source":"","published":"2023-06-09T05:33:18.588Z"},{"affected":"\u2264 3.3.0","affected_versions_present":true,"cve_id":"CVE-2023-0709","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-0709","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-04-08T16:42:21.492Z","patch_url":"https://plugins.trac.wordpress.org/browser/metform/trunk/base/shortcode.php?rev=2845078","primary_source":"","published":"2023-06-09T05:33:13.737Z"},{"affected":"\u2264 3.3.1","affected_versions_present":true,"cve_id":"CVE-2023-0693","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-0693","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-04-08T16:40:56.702Z","patch_url":"https://plugins.trac.wordpress.org/browser/metform/trunk/base/shortcode.php?rev=2845078","primary_source":"","published":"2023-06-09T05:33:12.877Z"},{"affected":"\u2264 3.3.0","affected_versions_present":true,"cve_id":"CVE-2023-0695","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-0695","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-04-08T16:40:25.789Z","patch_url":"https://plugins.trac.wordpress.org/browser/metform/trunk/base/shortcode.php?rev=2845078","primary_source":"","published":"2023-06-09T05:33:12.472Z"},{"affected":"\u2264 3.3.1","affected_versions_present":true,"cve_id":"CVE-2023-0694","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-0694","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-04-08T16:38:06.694Z","patch_url":"https://plugins.trac.wordpress.org/browser/metform/trunk/base/shortcode.php?rev=2845078","primary_source":"","published":"2023-06-09T05:33:12.037Z"},{"affected":"\u2264 3.1.2","affected_versions_present":true,"cve_id":"CVE-2023-0084","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-0084","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-04-08T16:33:33.436Z","patch_url":"https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2845078%40metform&new=2845078%40metform&sfp_email=&sfph_mail=","primary_source":"","published":"2023-03-02T18:35:22.201Z"},{"affected":"\u2264 3.2.1","affected_versions_present":true,"cve_id":"CVE-2023-0085","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-0085","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-04-08T16:58:37.427Z","patch_url":"https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2868889%40metform&new=2868889%40metform&sfp_email=&sfph_mail=","primary_source":"","published":"2023-03-02T16:01:14.196Z"},{"affected":"\u2264 2.1.3","affected_versions_present":true,"cve_id":"CVE-2022-1442","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-1442","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-04-08T16:33:14.530Z","patch_url":"https://plugins.trac.wordpress.org/changeset/2711944/metform/trunk/core/forms/action.php","primary_source":"","published":"2022-05-10T19:30:12.000Z"}],"source_generated_at":"2026-10-10T06:21:41.304Z","vendor":"roxnor"}}