132 matches found
CVE-2025-26731
CVE-2025-26731 : ARPrice (WordPress Pricing Table Plugin) is affected by a stored cross-site scripting (XSS) vulnerability caused by improper input neutralization during web page generation. The issue impacts ARPrice versions from n/a up to 4.1.3. The vulnerability entry is linked to ARPrice and ...
CVE-2022-47140
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Repute InfoSystems ARMember plugin = 4.0.1 versions...
CVE-2024-30222
Deserialization of Untrusted Data vulnerability in Repute Infosystems ARMember.This issue affects ARMember: from n/a through 4.0.26...
CVE-2024-30223
Deserialization of Untrusted Data vulnerability in Repute Infosystems ARMember.This issue affects ARMember: from n/a through 4.0.26...
CVE-2024-32948
Missing Authorization vulnerability in Repute Infosystems ARMember.This issue affects ARMember: from n/a through 4.0.28...
CVE-2024-54216
Path Traversal: '.../...//' vulnerability in reputeinfosystems ARForms arforms allows Path Traversal.This issue affects ARForms: from n/a through = 6.4.1...
CVE-2024-31270
Missing Authorization vulnerability in Repute InfoSystems ARForms Form Builder.This issue affects ARForms Form Builder: from n/a through 1.6.1...
CVE-2025-24732
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Booking & Appointment - Repute Infosystems BookingPress allows DOM-Based XSS. This issue affects BookingPress: from n/a through 1.1.25...
CVE-2025-24732
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in reputeinfosystems BookingPress bookingpress-appointment-booking allows DOM-Based XSS.This issue affects BookingPress: from n/a through = 1.1.25...
CVE-2025-24732 WordPress BookingPress Plugin <= 1.1.25 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in reputeinfosystems BookingPress bookingpress-appointment-booking allows DOM-Based XSS.This issue affects BookingPress: from n/a through = 1.1.25...
CVE-2025-24732
CVE-2025-24732 : BookingPress plugin (WordPress) ≤ 1.1.25 suffers DOM-based XSS due to improper input neutralization during page generation. Exploitation could affect pages rendered via BookingPress. Public references list patch availability; Red Hat/NVD entries confirm the vulnerability. Remedia...
CVE-2023-39994
Missing Authorization vulnerability in Repute InfoSystems ARMember Premium allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ARMember Premium: from n/a through 5.9.2...
CVE-2024-54223 WordPress ARForms plugin <= 1.7.1 - HTML Injection vulnerability
Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in reputeinfosystems ARForms Form Builder arforms-form-builder allows Code Injection.This issue affects ARForms Form Builder: from n/a through = 1.7.1...
CVE-2022-47424
Cross-Site Request Forgery CSRF vulnerability in Repute InfoSystems ARMember, Repute InfoSystems ARMember Premium allows Cross-Site Request Forgery.This issue affects ARMember: from n/a through 4.0.5; ARMember Premium: from n/a before 6.7.1...
CVE-2022-47424
CVE-2022-47424 is a CSRF vulnerability in Repute InfoSystems ARMember (and ARMember Premium). Affected: ARMember up to version 4.0.5; ARMember Premium up to 6.7.0.x (before 6.7.1). Root cause is Cross-Site Request Forgery enabling unauthorized actions. Remediation: update ARMember to 4.0.6 or lat...
CVE-2024-37920
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Repute InfoSystems ARForms Form Builder allows Reflected XSS.This issue affects ARForms Form Builder: from n/a through 1.6.7...
CVE-2024-37920
CVE-2024-37920 (ARForms Form Builder) is a Reflected XSS in ARForms Form Builder for WordPress, affecting 1.6.7 and earlier. The issue arises from improper input neutralization during web page generation, enabling reflected scripts. The Red Hat/NVD entries confirm the vulnerability details and ma...
PT-2024-27826 · Repute Infosystems · Arforms Form Builder
Name of the Vulnerable Software and Affected Versions: Repute InfoSystems ARForms Form Builder versions 1.6.7 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS...