Skip to content

Repute Infosystems vulnerabilities

Products

Newest

repute infosystems armember premium WordPress ARMember Premium plugin <= 7.8 - SQL Injection vulnerability CVE-2026-42417 9.3 CriticalOctober 6, 2026
repute infosystems bookingpress appointment booking pro WordPress BookingPress Appointment Booking Pro plugin <= 6.0.2 - SQL Injection vulnerability CVE-2026-68566 9.3 CriticalAugust 20, 2026
repute infosystems armember premium WordPress ARMember Premium plugin < 7.6 - PHP Object Injection vulnerability CVE-2026-27060 8.8 HighJuly 2, 2026
repute infosystems bookingpress appointment booking pro BookingPress Appointment Booking Pro <= 5.7.1 - Unauthenticated SQL Injection via 'store_service_date' Parameter CVE-2026-11823 7.5 HighJuly 1, 2026
repute info systems arforms WordPress ARForms plugin <= 7.1.2 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2026-57338 7.1 HighJune 29, 2026
repute infosystems bookingpress appointment booking pro BookingPress Pro <= 5.6 - Unauthenticated Arbitrary File Upload via Signature Custom Field CVE-2026-6960 Public exploit 9.8 CriticalMay 21, 2026
repute infosystems armember WordPress ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup plugin <= 3.4.10 - Broken Access Control CVE-2022-47425 4.3 MediumDecember 9, 2025
repute infosystems arprice WordPress ARPrice plugin <= 4.1.3 - Cross Site Scripting (XSS) vulnerability CVE-2025-26731 6.5 MediumMarch 27, 2025
repute infosystems arprice WordPress ARPrice plugin <= 4.1.3 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-49700 7.1 HighJanuary 21, 2025
repute infosystems arprice WordPress ARPrice plugin <= 4.1.3 - PHP Object Injection vulnerability CVE-2024-49699 Public exploit 8.8 HighJanuary 21, 2025
repute infosystems arprice WordPress ARPrice plugin <= 4.1.3 - Unauthenticated PHP Object Injection vulnerability CVE-2024-49688 9.8 CriticalJanuary 21, 2025
repute infosystems arprice WordPress ARPrice plugin <= 4.1.3 - SQL Injection vulnerability CVE-2024-49666 8.5 HighJanuary 21, 2025
repute infosystems arprice WordPress ARPrice plugin <= 4.1.3 - Unauthenticated SQL Injection vulnerability CVE-2024-49655 9.3 CriticalJanuary 21, 2025
repute infosystems armember premium, reputeinfosystems armember +1 more WordPress ARMember Premium plugin <= 5.9.2 - Broken Access Control CVE-2023-39994 4.3 MediumJanuary 2, 2025
repute infosystems armember, armember premium +1 more WordPress ARMember plugin <= 4.0.5 - Cross Site Request Forgery (CSRF) CVE-2022-47424 5.4 MediumNovember 19, 2024
contact form - repute infosystems arforms form builder WordPress ARForms Form Builder plugin <= 1.6.7 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-37920 7.1 HighJuly 20, 2024
repute infosystems bookingpress WordPress BookingPress plugin <= 1.0.82 - Appointment Duration Manipulation vulnerability CVE-2024-34799 6.5 MediumJune 11, 2024
armemberplugin armember WordPress ARMember plugin <= 4.0.10 - Membership Plan Bypass vulnerability CVE-2023-47837 8.3 HighJune 4, 2024
repute infosystems armember WordPress ARMember plugin <= 4.0.10 - Privilege Escalation vulnerability CVE-2023-51356 8.8 HighMay 17, 2024
contact form - repute infosystems arforms form builder WordPress ARForms Form Builder plugin <= 1.6.1 - Broken Access Control vulnerability CVE-2024-31270 7.6 HighMay 8, 2024
repute infosystems bookingpress WordPress BookingPress plugin <= 1.0.74 - Booking Price Manipulation vulnerability CVE-2023-51405 8.2 HighApril 24, 2024
armemberplugin armember WordPress ARMember – Membership Plugin plugin <= 4.0.28 - Broken Access Control vulnerability CVE-2024-32948 9.1 CriticalApril 24, 2024
contact form - repute infosystems arforms form builder WordPress ARForms Form Builder plugin <= 1.6.1 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-31272 6.3 MediumApril 12, 2024
repute infosystems bookingpress WordPress BookingPress plugin <= 1.0.81 - Insecure Direct Object References (IDOR) vulnerability CVE-2024-31296 4.3 MediumApril 7, 2024
repute infosystems armember WordPress ARMember plugin <= 4.0.26 - PHP Object Injection vulnerability CVE-2024-30222 8.5 HighMarch 28, 2024
repute infosystems armember WordPress ARMember plugin <= 4.0.26 - Unauthenticated PHP Object Injection vulnerability CVE-2024-30223 9.0 CriticalMarch 28, 2024
repute infosystems armember – membership plugin, content restriction, member levels, user profile & user signup, reputeinfosystems armember +1 more WordPress ARMember plugin <= 4.0.23 - Cross Site Scripting (XSS) vulnerability CVE-2024-27995 5.9 MediumMarch 21, 2024
repute infosystems armember – membership plugin, content restriction, member levels, user profile & user signup, reputeinfosystems armember +1 more WordPress ARMember Plugin <= 4.0.22 is vulnerable to Cross Site Request Forgery (CSRF) leading to PHP Object Injection CVE-2023-52200 9.6 CriticalJanuary 8, 2024
repute infosystems bookingpress – appointment booking calendar plugin and online scheduling plugin, reputeinfosystems bookingpress +1 more WordPress BookingPress Plugin <= 1.0.72 is vulnerable to SQL Injection CVE-2023-50841 8.5 HighDecember 28, 2023
repute infosystems bookingpress – appointment booking calendar plugin and online scheduling plugin, reputeinfosystems bookingpress +1 more WordPress BookingPress Plugin <= 1.0.64 is vulnerable to Sensitive Data Exposure CVE-2023-36507 5.3 MediumNovember 30, 2023
repute infosystems armember WordPress ARMember Plugin <= 3.4.11 is vulnerable to SQL Injection CVE-2022-46808 8.2 HighNovember 3, 2023
armemberplugin armember, repute infosystems armember (free), armember (premium) +2 more WordPress ARMember (free) and ARMember (premium) plugins - vulnerable to Auth. Stored Cross Site Scripting (XSS) CVE-2022-47421 5.9 MediumJuly 18, 2023
repute infosystems armember WordPress ARMember Plugin <= 4.0.2 is vulnerable to Cross Site Scripting (XSS) CVE-2023-33323 5.9 MediumJune 22, 2023
repute infosystems armember WordPress ARMember Plugin <= 4.0.1 is vulnerable to Cross Site Scripting (XSS) CVE-2022-47140 7.1 HighJune 12, 2023
contact form - repute infosystems arforms form builder WordPress ARForms Form Builder Plugin <= 1.5.5 is vulnerable to Cross Site Scripting (XSS) CVE-2022-45838 6.1 MediumApril 18, 2023
armemberplugin armember WordPress ARMember Plugin <= 5.5.1 is vulnerable to Privilege Escalation CVE-2022-42888 9.8 CriticalDecember 6, 2022