Where
-Infinity
0

Trending

Last week
Last month
Last year

Versions

6.4.1
2

Repute info systems ARFormsWordPress ARForms plugin <= 6.4.1 - Subscriber+ Plugin Settings Change vulnerability

Risk 25
Severity
5.4
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Missing Authorization vulnerability in reputeinfosystems ARForms arforms.This issue affects ARForms: from n/a through <= 6.4.1.

First published (updated )
CVE-2024-54217

Repute InfoSystems ARFormsWordPress ARForms plugin < 7.0.2 - Path Traversal vulnerability

Risk 39
Severity
7.7
Path Traversal
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Path Traversal: '.../...//' vulnerability in reputeinfosystems ARForms allows Path Traversal.

This issue affects ARForms: from n/a before 7.0.2.

First published (updated )
CVE-2024-54216

reputeinfosystems Arforms WordpressWordPress ARForms plugin <= 6.4 - Subscriber+ Arbitrary File Deletion vulnerability

Risk 60
Severity
8.1
Path Traversal
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in reputeinfosystems ARForms arforms.This issue affects ARForms: from n/a through <= 6.4.

Remedy

Update to 6.4.1 or a higher version.
First published (updated )
CVE-2024-32703

reputeinfosystems Arforms WordpressWordPress ARForms plugin <= 6.4 - Subscriber+ Arbitrary WordPress Options Removal vulnerability

Risk 38
Severity
7.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Missing Authorization vulnerability in reputeinfosystems ARForms arforms.This issue affects ARForms: from n/a through <= 6.4.

Remedy

Update to 6.4.1 or a higher version.
First published (updated )
CVE-2024-32704

reputeinfosystems Arforms WordpressWordPress ARForms plugin <= 6.4 - Subscriber+ Arbitrary Plugin Activation/Deactivation Vulnerability

Risk 79
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Missing Authorization vulnerability in reputeinfosystems ARForms arforms.This issue affects ARForms: from n/a through <= 6.4.

Remedy

Update to 6.4.1 or a higher version.
First published (updated )
CVE-2024-32705

reputeinfosystems Arforms WordpressArForms < 6.6 - Unauthenticated RCE

Risk 61
Severity
9.8
EPSS
0.04%
Code Injection
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

The ARForms - Premium WordPress Form Builder Plugin WordPress plugin before 6.6 allows unauthenticated users to modify uploaded files in such a way that PHP code can be uploaded when an upload file input is included on a form

First published (updated )
CVE-2024-4620

ARForms Premium WordPress Form Builder PluginArForms < 6.6 - Admin+ Stored XSS

Risk 22
Severity
4.8
EPSS
0.04%
XSS
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

The ARForms - Premium WordPress Form Builder Plugin WordPress plugin before 6.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed (for example in multisite setup)

First published (updated )
CVE-2024-4621

Repute info systems ARFormsWordPress ARForms plugin <= 6.4 - Reflected Cross Site Scripting (XSS) vulnerability

Risk 27
Severity
7.1
EPSS
0.04%
XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in reputeinfosystems ARForms arforms.This issue affects ARForms: from n/a through <= 6.4.

Remedy

Update to 6.4.1 or a higher version.
First published (updated )
CVE-2024-32702

Repute info systems ARFormsWordPress ARForms plugin <= 6.4 - Subscriber+ SQL Injection vulnerability

Risk 56
Severity
8.8
EPSS
0.04%
SQL Injection
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in reputeinfosystems ARForms arforms.This issue affects ARForms: from n/a through <= 6.4.

Remedy

Update to 6.4.1 or a higher version.
First published (updated )
CVE-2024-32706

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203