CVE-2024-13785 Contact Form, Survey, Quiz & Popup Form Builder – ARForms <= 1.7.2 - Unauthenticated Blind Arbitrary Shortcode Execution

The The Contact Form, Survey, Quiz & Popup Form Builder – ARForms plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.7.2. This is due to the software allowing users to execute an action that does not properly validate a value before running...

WordPress plugin ARForms 代码注入漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPress...

WordPress ARForms plugin <= 1.5.8 - Unauthenticated Stored Cross-Site Scripting via arf_http_referrer_url vulnerability

Unauthenticated Stored Cross-Site Scripting via arfhttpreferrerurl vulnerability discovered by drop in WordPress Plugin ARForms Form Builder versions = 1.5.8...

CVE-2019-16902

In the ARforms plugin 3.7.1 for WordPress, arfdeletefile in arformcontroller.php allows unauthenticated deletion of an arbitrary file by supplying the full pathname...

EUVD-2018-7676

Malware in sbrugna...

EUVD-2022-48692

Malicious code in bioql PyPI...

EUVD-2024-29166

Malicious code in bioql PyPI...

EUVD-2024-30492

Malicious code in bioql PyPI...

EUVD-2024-30489

Malicious code in bioql PyPI...

EUVD-2024-29168

Malicious code in bioql PyPI...

EUVD-2024-30490

Malicious code in bioql PyPI...

EUVD-2024-30491

Malicious code in bioql PyPI...

EUVD-2024-52344

Malicious code in bioql PyPI...

EUVD-2024-30493

Malicious code in bioql PyPI...

EUVD-2024-52343

Malicious code in bioql PyPI...

EUVD-2024-36880

Malicious code in bioql PyPI...

EUVD-2024-52349

Malicious code in bioql PyPI...

CVE-2024-0427

The ARForms - Premium WordPress Form Builder Plugin WordPress plugin before 6.4.1 does not properly escape user-controlled input when it is reflected in some of its AJAX actions...

CVE-2024-31272

Cross-Site Request Forgery CSRF vulnerability in Repute InfoSystems ARForms Form Builder.This issue affects ARForms Form Builder: from n/a through 1.6.1...

CVE-2024-4621

The ARForms - Premium WordPress Form Builder Plugin WordPress plugin before 6.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example ...