CVE-2024-13784

creationtimestamp| type| source ---|---|--- 2026-08-16 08:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mt6slw4wv62c 2026-08-16 11:05:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4t66vqy3lccyv...

CVE-2024-13784 Contact Form, Survey, Quiz & Popup Form Builder – ARForms <= 1.8.5 - Unauthenticated PHP Object Injection

The Contact Form, Survey, Quiz & Popup Form Builder – ARForms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.8.5 via deserialization of untrusted input from form submissions. This makes it possible for unauthenticated attackers to inject a PHP...

CVE-2024-13784

The CVE-2024-13784 entry concerns the WordPress plugin ARForms (Contact Form, Survey, Quiz & Popup Form Builder). Affected versions: all up to and including 1.8.5. Root cause: PHP Object Injection via deserialization of untrusted input from form submissions. Impact requires that a POP chain exist...