Skip to content
Reputeinfosystems vulnerabilities
Newest
-
repute infosystems armember premium
WordPress ARMember Premium plugin <= 7.8 - SQL Injection vulnerability
CVE-2026-42417
9.3 Critical
-
repute info systems arforms
WordPress ARForms plugin <= 7.1.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-39766
7.1 High
-
reputeinfosystems contact form, survey, quiz & popup form builder – arforms
Contact Form, Survey, Quiz & Popup Form Builder – ARForms <= 1.8.5 - Unauthenticated PHP Object Injection
CVE-2024-13784
9.8 Critical
-
reputeinfosystems armember – membership plugin, content restriction, member levels, user profile & user signup
ARMember <= 4.0.27 - Directory Traversal via X-FILENAME
CVE-2026-15302
5.3 Medium
-
reputeinfosystems armember – membership plugin, content restriction, member levels, user profile & user signup
ARMember <= 4.0.60 - Unauthenticated SQL Injection via 'orderby' Parameter
CVE-2026-7649
7.5 High
-
reputeinfosystems contact form, survey, quiz & popup form builder – arforms
Contact Form, Survey, Quiz & Popup Form Builder – ARForms <= 1.7.2 - Unauthenticated Blind Arbitrary Shortcode Execution
CVE-2024-13785
5.6 Medium
-
repute infosystems armember
WordPress ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup plugin <= 3.4.10 - Broken Access Control
CVE-2022-47425
4.3 Medium
-
reputeinfosystems social share and social locker
Social Share And Social Locker – ARSocial < 1.4.2 - Admin+ Stored XSS
CVE-2024-11189
4.8 Medium
-
reputeinfosystems arforms, unknown contact form, survey, quiz & popup form builder +1 more
ARForms Builder < 1.7.1 - Unauthenticated Stored XSS
CVE-2024-10504
5.4 Medium
-
reputeinfosystems social share and social locker
WordPress Social Share And Social Locker plugin <= 1.4.2 - SQL Injection vulnerability
CVE-2025-31911
9.3 Critical
-
reputeinfosystems social share and social locker
WordPress Social Share And Social Locker Plugin <= 1.4.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-31902
7.1 High
-
reputeinfosystems bookingpress
WordPress BookingPress plugin <= 1.1.28 - SQL Injection vulnerability
CVE-2025-31910
7.6 High
-
repute infosystems arprice
WordPress ARPrice plugin <= 4.1.3 - Cross Site Scripting (XSS) vulnerability
CVE-2025-26731
6.5 Medium
-
reputeinfosystems bookingpress
WordPress BookingPress Plugin <= 1.1.25 - Cross Site Scripting (XSS) vulnerability
CVE-2025-24732
6.5 Medium
-
repute infosystems arprice
WordPress ARPrice plugin <= 4.1.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-49700
7.1 High
-
repute infosystems arprice
WordPress ARPrice plugin <= 4.1.3 - PHP Object Injection vulnerability
CVE-2024-49699
Public exploit
8.8 High
-
repute infosystems arprice
WordPress ARPrice plugin <= 4.1.3 - Unauthenticated PHP Object Injection vulnerability
CVE-2024-49688
9.8 Critical
-
repute infosystems arprice
WordPress ARPrice plugin <= 4.1.3 - SQL Injection vulnerability
CVE-2024-49666
8.5 High
-
repute infosystems arprice
WordPress ARPrice plugin <= 4.1.3 - Unauthenticated SQL Injection vulnerability
CVE-2024-49655
9.3 Critical
-
repute infosystems armember premium, reputeinfosystems armember +1 more
WordPress ARMember Premium plugin <= 5.9.2 - Broken Access Control
CVE-2023-39994
4.3 Medium
-
reputeinfosystems appointment booking calendar plugin and scheduling plugin – bookingpress
Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress <= 1.1.21 - Authenticated (Contributor+) SQL Injection
CVE-2024-11726
6.5 Medium
-
repute info systems arforms
WordPress ARForms plugin <= 6.4.1 - Subscriber+ Plugin Settings Change vulnerability
CVE-2024-54217
5.4 Medium
-
contact form - repute infosystems arforms form builder
WordPress ARForms plugin <= 1.7.1 - HTML Injection vulnerability
CVE-2024-54223
5.3 Medium
-
repute info systems arforms
WordPress ARForms plugin < 7.0.2 - Path Traversal vulnerability
CVE-2024-54216
7.7 High
-
reputeinfosystems armember – membership plugin, content restriction, member levels, user profile & user signup
ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 4.0.51 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
CVE-2024-10681
6.3 Medium
-
repute infosystems armember, armember premium +1 more
WordPress ARMember plugin <= 4.0.5 - Cross Site Request Forgery (CSRF)
CVE-2022-47424
5.4 Medium
-
reputeinfosystems appointment booking calendar plugin and scheduling plugin – bookingpress, bookingpress +1 more
Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress <= 1.1.16 - Authenticated (Subscriber+) SQL Injection
CVE-2024-10540
5.3 Medium
-
reputeinfosystems armember – membership plugin, content restriction, member levels, user profile & user signup
ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 4.0.37 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Upload
CVE-2024-7703
Public exploit
6.4 Medium
-
reputeinfosystems appointment booking calendar plugin and scheduling plugin – bookingpress, appointment booking calendar plugin and scheduling plugin bookingpress +1 more
Appointment Booking Calendar Plugin and Online Scheduling Plugin – BookingPress 1.1.6 - 1.1.7 - Authentication Bypass to Account Takeover
CVE-2024-7350
9.8 Critical
-
contact form - repute infosystems arforms form builder
WordPress ARForms Form Builder plugin <= 1.6.7 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-37920
7.1 High
-
reputeinfosystems bookingpress, appointment booking calendar plugin and scheduling plugin – bookingpress +1 more
BookingPress Appointment Booking <= 1.1.5 - Authenticated (Subscriber+) Arbitrary File Read to Arbitrary File Creation
CVE-2024-6467
8.8 High
-
reputeinfosystems bookingpress, appointment booking calendar plugin and scheduling plugin – bookingpress +1 more
BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin <= 1.1.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update and Arbitrary File Upload
CVE-2024-6660
8.8 High
-
reputeinfosystems arforms, unknown arforms - premium wordpress form builder plugin, reputeinfosystems arforms form builder +2 more
Arforms < 6.4.1 - Reflected XSS
CVE-2024-0427
6.3 Medium
-
repute infosystems bookingpress
WordPress BookingPress plugin <= 1.0.82 - Appointment Duration Manipulation vulnerability
CVE-2024-34799
6.5 Medium
-
repute info systems arforms
WordPress ARForms plugin <= 6.4 - Subscriber+ Arbitrary File Deletion vulnerability
CVE-2024-32703
7.7 High
-
repute info systems arforms
WordPress ARForms plugin <= 6.4 - Subscriber+ Arbitrary WordPress Options Removal vulnerability
CVE-2024-32704
7.1 High
-
repute info systems arforms
WordPress ARForms plugin <= 6.4 - Subscriber+ Arbitrary Plugin Activation/Deactivation Vulnerability
CVE-2024-32705
7.1 High
-
reputeinfosystems arforms, unknown arforms - premium wordpress form builder plugin, reputeinfosystems arforms form builder +2 more
ArForms < 6.6 - Admin+ Stored XSS
CVE-2024-4621
4.8 Medium
-
reputeinfosystems arforms, unknown arforms - premium wordpress form builder plugin, reputeinfosystems arforms form builder +2 more
ArForms < 6.6 - Unauthenticated RCE
CVE-2024-4620
9.8 Critical
-
armemberplugin armember
WordPress ARMember plugin <= 4.0.10 - Membership Plan Bypass vulnerability
CVE-2023-47837
8.3 High
-
repute infosystems armember
WordPress ARMember plugin <= 4.0.10 - Privilege Escalation vulnerability
CVE-2023-51356
8.8 High
-
contact form - repute infosystems arforms form builder
WordPress ARForms Form Builder plugin <= 1.6.1 - Broken Access Control vulnerability
CVE-2024-31270
7.6 High
-
reputeinfosystems armember – membership plugin, content restriction, member levels, user profile & user signup
ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 4.0.30 - Open Redirect
CVE-2024-4133
6.1 Medium
-
reputeinfosystems contact form, survey, quiz & popup form builder – arforms
ARForms Form Builder <= 1.6.4 - Missing Authorization to Authenticated(Subscriber+) Arbitrary Option Deletion
CVE-2024-1945
7.1 High
-
repute infosystems bookingpress
WordPress BookingPress plugin <= 1.0.74 - Booking Price Manipulation vulnerability
CVE-2023-51405
8.2 High
-
repute info systems arforms
WordPress ARForms plugin <= 6.4 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-32702
7.1 High
-
repute info systems arforms
WordPress ARForms plugin <= 6.4 - Subscriber+ SQL Injection vulnerability
CVE-2024-32706
8.5 High
-
armemberplugin armember
WordPress ARMember – Membership Plugin plugin <= 4.0.28 - Broken Access Control vulnerability
CVE-2024-32948
9.1 Critical
-
contact form - repute infosystems arforms form builder
WordPress ARForms Form Builder plugin <= 1.6.1 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-31272
6.3 Medium
-
repute infosystems bookingpress
WordPress BookingPress plugin <= 1.0.81 - Insecure Direct Object References (IDOR) vulnerability
CVE-2024-31296
4.3 Medium
- Show olderLoading…