WordPress ARForms plugin <= 1.5.8 - Unauthenticated Stored Cross-Site Scripting via arf_http_referrer_url vulnerability

Unauthenticated Stored Cross-Site Scripting via arfhttpreferrerurl vulnerability discovered by drop in WordPress Plugin ARForms Form Builder versions = 1.5.8...

CVE-2019-16902

In the ARforms plugin 3.7.1 for WordPress, arfdeletefile in arformcontroller.php allows unauthenticated deletion of an arbitrary file by supplying the full pathname...

EUVD-2018-7676

Malware in sbrugna...

EUVD-2022-48692

Malicious code in bioql PyPI...

EUVD-2024-30492

Malicious code in bioql PyPI...

EUVD-2024-29166

Malicious code in bioql PyPI...

EUVD-2024-30489

Malicious code in bioql PyPI...

EUVD-2024-52344

Malicious code in bioql PyPI...

EUVD-2024-30490

Malicious code in bioql PyPI...

EUVD-2024-30491

Malicious code in bioql PyPI...

EUVD-2024-29168

Malicious code in bioql PyPI...

EUVD-2024-30493

Malicious code in bioql PyPI...

EUVD-2024-52349

Malicious code in bioql PyPI...

EUVD-2024-52343

Malicious code in bioql PyPI...

EUVD-2024-36880

Malicious code in bioql PyPI...

CVE-2024-0427

The ARForms - Premium WordPress Form Builder Plugin WordPress plugin before 6.4.1 does not properly escape user-controlled input when it is reflected in some of its AJAX actions...

CVE-2024-31272

Cross-Site Request Forgery CSRF vulnerability in Repute InfoSystems ARForms Form Builder.This issue affects ARForms Form Builder: from n/a through 1.6.1...

CVE-2024-4621

The ARForms - Premium WordPress Form Builder Plugin WordPress plugin before 6.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example ...

CVE-2024-54217

Missing Authorization vulnerability in reputeinfosystems ARForms arforms.This issue affects ARForms: from n/a through = 6.4.1...

CVE-2024-54223

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in reputeinfosystems ARForms Form Builder arforms-form-builder allows Code Injection.This issue affects ARForms Form Builder: from n/a through = 1.7.1...