CVE-2024-4620

The ARForms - Premium WordPress Form Builder Plugin for WordPress (versions prior to 6.6 ) is vulnerable to an unauthenticated Remote Code Execution (RCE) . The root cause is that the plugin allows unauthenticated users to modify uploaded files, which can be exploited to upload and execute PHP co...

CVE-2024-32705

The reputeinfosystems ARForms WordPress plugin (versions

CVE-2024-4621

The ARForms - Premium WordPress Form Builder Plugin for WordPress versions prior to 6.6 is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitise and escape certain plugin settings. This flaw allows high-privilege users, such as administrators, to per...

CVE-2024-32702

The ARForms WordPress plugin (versions

CVE-2024-32704

The reputeinfosystems ARForms WordPress plugin is affected by a Missing Authorization vulnerability (CVE-2024-32704) in versions 6.4 and earlier . This flaw allows users with Subscriber privileges to perform Arbitrary WordPress Options Removal , which falls under the OWASP Top 10 A1: Broken Acces...

CVE-2024-32706

The ARForms WordPress plugin (versions

CVE-2024-32703

The ARForms WordPress plugin (versions

CVE-2024-0427

The ARForms - Premium WordPress Form Builder Plugin for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) in versions prior to 6.4.1 . The root cause is the improper escaping of user-controlled input when reflected in certain AJAX actions . This flaw allows an attacker to execute ar...

CVE-2024-10504

The Contact Form, Survey, Quiz & Popup Form Builder WordPress plugin (versions prior to 1.7.1 ) is vulnerable to Unauthenticated Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitise and escape certain parameters when they are outputted onto a page. This could all...