Filtered by vendor Reputeinfosystems
Subscriptions
Filtered by product Arforms
Subscriptions
Total
6 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2024-4620 | 1 Reputeinfosystems | 1 Arforms | 2025-05-01 | 9.8 Critical |
| The ARForms - Premium WordPress Form Builder Plugin WordPress plugin before 6.6 allows unauthenticated users to modify uploaded files in such a way that PHP code can be uploaded when an upload file input is included on a form | ||||
| CVE-2024-4621 | 1 Reputeinfosystems | 1 Arforms | 2025-05-01 | 4.8 Medium |
| The ARForms - Premium WordPress Form Builder Plugin WordPress plugin before 6.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) | ||||
| CVE-2024-32705 | 1 Reputeinfosystems | 1 Arforms | 2024-11-21 | 7.1 High |
| Missing Authorization vulnerability in reputeinfosystems ARForms.This issue affects ARForms: from n/a through 6.4. | ||||
| CVE-2024-32704 | 1 Reputeinfosystems | 1 Arforms | 2024-11-21 | 7.1 High |
| Missing Authorization vulnerability in reputeinfosystems ARForms.This issue affects ARForms: from n/a through 6.4. | ||||
| CVE-2024-32703 | 1 Reputeinfosystems | 1 Arforms | 2024-11-21 | 7.7 High |
| Missing Authorization vulnerability in reputeinfosystems ARForms.This issue affects ARForms: from n/a through 6.4. | ||||
| CVE-2019-16902 | 1 Reputeinfosystems | 1 Arforms | 2024-11-21 | 7.5 High |
| In the ARforms plugin 3.7.1 for WordPress, arf_delete_file in arformcontroller.php allows unauthenticated deletion of an arbitrary file by supplying the full pathname. | ||||
Page 1 of 1.