CVE-2026-86832

MetForm < 4.3.1 - Unauthenticated Form Entry Data Disclosure via REST API PUBLISHED

Description (CNA)

The MetForm WordPress plugin before 4.3.1 does not properly restrict access to form submission data, allowing unauthenticated attackers to view submitter information through the REST API.

Affected (CNA)

Vendor / product	Versions
Unknown / MetForm	affected 0 before 4.3.1

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/d73e4c95-471b-4f22-97a0-b6a59f187bcd/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.