What’s Vulnerable › Products

Repute InfoSystems ARForms Form Builder vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your Repute InfoSystems ARForms Form Builder version is affected

Latest Repute InfoSystems ARForms Form Builder vulnerabilities

• CVE-2024-13784 — Contact Form, Survey, Quiz & Popup Form Builder – ARForms <= 1.8.5 - Unauthenticated PHP Object Injection (CVSS 9.8)
• CVE-2024-13785 — Contact Form, Survey, Quiz & Popup Form Builder – ARForms <= 1.7.2 - Unauthenticated Blind Arbitrary Shortcode Execution (CVSS 5.6)
• CVE-2024-54223 — WordPress ARForms plugin <= 1.7.1 - HTML Injection vulnerability (CVSS 6.1)
• CVE-2024-37920 — WordPress ARForms Form Builder plugin <= 1.6.7 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 6.1)
• CVE-2024-31270 — WordPress ARForms Form Builder plugin <= 1.6.1 - Broken Access Control vulnerability (CVSS 8.0)
• CVE-2024-1945 — ARForms Form Builder <= 1.6.4 - Missing Authorization to Authenticated(Subscriber+) Arbitrary Option Deletion (CVSS 7.1)
• CVE-2024-31272 — WordPress ARForms Form Builder plugin <= 1.6.1 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 6.3)
• CVE-2023-6828 — ARForms <= 1.5.8 - Unauthenticated Stored Cross-Site Scripting via arf_http_referrer_url (CVSS 6.1)
• CVE-2022-45838 — WordPress ARForms Form Builder Plugin <= 1.5.5 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.1)