CVE-2026-86832

medium

Description

The MetForm WordPress plugin before 4.3.1 does not properly restrict access to form submission data, allowing unauthenticated attackers to view submitter information through the REST API.

References

https://wpscan.com/vulnerability/d73e4c95-471b-4f22-97a0-b6a59f187bcd/

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-91939

Details

Source: Mitre, NVD

Published: 2026-10-03

Updated: 2026-10-06

Risk Information

CVSS v2

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 5.3

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N