A
ARForms
Security Risk Profile
84
/100
criticalSecurity Risk Score
Comprehensive risk assessment based on 6 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from May 2, 2024 to present
6
Total CVEs
3
Critical+High
0
Exploited
3
Unpatched
Threat Assessment
Avg CVSS
7.2
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
3
Critical/High
Risk Level
84/100
critical
📈 1 in Last 30 Days
Severity Distribution
Critical
2High
1Medium
3Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
2Age Distribution
Common Weaknesses (CWE)
1
XSS
3
2
Code Injection
1
Most Affected Products
1. reputeinfosystems Arforms Wordpress4
2. ARForms ARForms2
3. ARForms ARForms Builder1
4. ARForms ARForms - Premium WordPress Form Builder Plugin1
5. ARForms Premium WordPress Form Builder Plugin1
Recent Vulnerabilities
See more →CVE-2024-13784
CVSS 9.8critical
Contact Form, Survey, Quiz & Popup Form Builder – ARForms <= 1.8.5 - Unauthenticated PHP Object Injection
Aug 16, 2026🔧 No Patch
CVE-2024-10504
CVSS 5.4medium
ARForms Builder < 1.7.1 - Unauthenticated Stored XSS
May 15, 2025🔧 No Patch
CVE-2024-0427
CVSS 6.3medium
Arforms < 6.4.1 - Reflected XSS
Jun 12, 2024🔧 No Patch
CVE-2024-4620
CVSS 9.8EPSS 0%critical
ArForms < 6.6 - Unauthenticated RCE
Jun 7, 2024🔧 No Patch
CVE-2024-4621
CVSS 4.8EPSS 0%medium
ArForms < 6.6 - Admin+ Stored XSS
Jun 7, 2024🔧 No Patch
CVE-2024-1945
CVSS 7.1high
ARForms Form Builder <= 1.6.4 - Missing Authorization to Authenticated(Subscriber+) Arbitrary Option Deletion
May 2, 2024🔧 No Patch
Monitor ARForms in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.