CVE-2026-86833 | MetForm Plugin up to 4.3.0 on WordPress Email Notification injection

October 7, 2026 Yanac

A vulnerability has been found in MetForm Plugin up to 4.3.0 on WordPress and classified as critical. Affected by this issue is some unknown functionality of the component Email Notification. Performing a manipulation results in injection.

This vulnerability is identified as CVE-2026-86833. The attack can be initiated remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More