CVE-2026-18100 | roxnor MetForm Plugin up to 4.1.8 on WordPress Widget Setting mf_form_id cross site scripting

August 25, 2026 Yanac

A vulnerability classified as problematic has been found in roxnor MetForm Plugin up to 4.1.8 on WordPress. This impacts an unknown function of the component Widget Setting. Performing a manipulation of the argument mf_form_id results in cross site scripting.

This vulnerability was named CVE-2026-18100. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More