Arforms Form Builder
Reputeinfosystems · 9 CVEs
WordPress ARForms plugin <= 1.7.1 - HTML Injection vulnerability
Dec 9, 2024
WordPress ARForms Form Builder plugin <= 1.6.7 - Reflected Cross Site Scripting (XSS) vulnerability
Jul 20, 2024
Arforms < 6.4.1 - Reflected XSS
Jun 12, 2024
ArForms < 6.6 - Admin+ Stored XSS
Jun 7, 2024
ArForms < 6.6 - Unauthenticated RCE
Jun 7, 2024
WordPress ARForms Form Builder plugin <= 1.6.1 - Broken Access Control vulnerability
May 8, 2024
WordPress ARForms Form Builder plugin <= 1.6.1 - Cross Site Request Forgery (CSRF) vulnerability
Apr 12, 2024
ARForms <= 1.5.8 - Unauthenticated Stored Cross-Site Scripting via arf_http_referrer_url
Jan 11, 2024
WordPress ARForms Form Builder Plugin <= 1.5.5 is vulnerable to Cross Site Scripting (XSS)
Apr 18, 2023
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2024-54223 | WordPress ARForms plugin <= 1.7.1 - HTML Injection vulnerability | MEDIUM | 0.33% | Dec 9, 2024 |
| CVE-2024-37920 | WordPress ARForms Form Builder plugin <= 1.6.7 - Reflected Cross Site Scripting (XSS) vulnerability | HIGH | 0.33% | Jul 20, 2024 |
| CVE-2024-0427 | Arforms < 6.4.1 - Reflected XSS | MEDIUM | 0.36% | Jun 12, 2024 |
| CVE-2024-4621 | ArForms < 6.6 - Admin+ Stored XSS | MEDIUM | 0.35% | Jun 7, 2024 |
| CVE-2024-4620 | ArForms < 6.6 - Unauthenticated RCE | CRITICAL | 3.35% | Jun 7, 2024 |
| CVE-2024-31270 | WordPress ARForms Form Builder plugin <= 1.6.1 - Broken Access Control vulnerability | HIGH | 0.36% | May 8, 2024 |
| CVE-2024-31272 | WordPress ARForms Form Builder plugin <= 1.6.1 - Cross Site Request Forgery (CSRF) vulnerability | MEDIUM | 0.18% | Apr 12, 2024 |
| CVE-2023-6828 | ARForms <= 1.5.8 - Unauthenticated Stored Cross-Site Scripting via arf_http_referrer_url | HIGH | 0.37% | Jan 11, 2024 |
| CVE-2022-45838 | WordPress ARForms Form Builder Plugin <= 1.5.5 is vulnerable to Cross Site Scripting (XSS) | MEDIUM | 0.41% | Apr 18, 2023 |
Showing 1 to 9 of 9 CVEs