Medium 5.3
2026-04-22< 3.9.8
WordPress MetForm Pro Plugin <= 3.9.7 is vulnerable to Broken Access Control
Minimum safe version
3.9.8
Update to 3.9.8 or later to address 2 fixable vulnerabilities
WordPress MetForm Pro Plugin <= 3.9.7 is vulnerable to Broken Access Control
MetForm Pro <= 3.9.6 - Unauthenticated Stored Cross-Site Scripting
MetForm Pro <= 3.9.1 - Missing Authorization