Reputeinfosystems Arforms vulnerabilities

• repute info systems arforms WordPress ARForms plugin <= 7.1.2 - Cross Site Scripting (XSS) vulnerability CVE-2026-39766 7.1 HighOctober 6, 2026
• reputeinfosystems contact form, survey, quiz & popup form builder – arforms Contact Form, Survey, Quiz & Popup Form Builder – ARForms <= 1.8.5 - Unauthenticated PHP Object Injection CVE-2024-13784 9.8 CriticalAugust 16, 2026
• reputeinfosystems contact form, survey, quiz & popup form builder – arforms Contact Form, Survey, Quiz & Popup Form Builder – ARForms <= 1.7.2 - Unauthenticated Blind Arbitrary Shortcode Execution CVE-2024-13785 5.6 MediumMarch 21, 2026
• reputeinfosystems arforms, unknown contact form, survey, quiz & popup form builder +1 more ARForms Builder < 1.7.1 - Unauthenticated Stored XSS CVE-2024-10504 5.4 MediumMay 15, 2025
• repute info systems arforms WordPress ARForms plugin <= 6.4.1 - Subscriber+ Plugin Settings Change vulnerability CVE-2024-54217 5.4 MediumDecember 9, 2024
• contact form - repute infosystems arforms form builder WordPress ARForms plugin <= 1.7.1 - HTML Injection vulnerability CVE-2024-54223 5.3 MediumDecember 9, 2024
• repute info systems arforms WordPress ARForms plugin < 7.0.2 - Path Traversal vulnerability CVE-2024-54216 7.7 HighDecember 6, 2024
• contact form - repute infosystems arforms form builder WordPress ARForms Form Builder plugin <= 1.6.7 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-37920 7.1 HighJuly 20, 2024
• reputeinfosystems arforms, unknown arforms - premium wordpress form builder plugin, reputeinfosystems arforms form builder +2 more Arforms < 6.4.1 - Reflected XSS CVE-2024-0427 6.3 MediumJune 12, 2024
• repute info systems arforms WordPress ARForms plugin <= 6.4 - Subscriber+ Arbitrary File Deletion vulnerability CVE-2024-32703 7.7 HighJune 9, 2024
• repute info systems arforms WordPress ARForms plugin <= 6.4 - Subscriber+ Arbitrary WordPress Options Removal vulnerability CVE-2024-32704 7.1 HighJune 9, 2024
• repute info systems arforms WordPress ARForms plugin <= 6.4 - Subscriber+ Arbitrary Plugin Activation/Deactivation Vulnerability CVE-2024-32705 7.1 HighJune 9, 2024
• reputeinfosystems arforms, unknown arforms - premium wordpress form builder plugin, reputeinfosystems arforms form builder +2 more ArForms < 6.6 - Admin+ Stored XSS CVE-2024-4621 4.8 MediumJune 7, 2024
• reputeinfosystems arforms, unknown arforms - premium wordpress form builder plugin, reputeinfosystems arforms form builder +2 more ArForms < 6.6 - Unauthenticated RCE CVE-2024-4620 9.8 CriticalJune 7, 2024
• contact form - repute infosystems arforms form builder WordPress ARForms Form Builder plugin <= 1.6.1 - Broken Access Control vulnerability CVE-2024-31270 7.6 HighMay 8, 2024
• reputeinfosystems contact form, survey, quiz & popup form builder – arforms ARForms Form Builder <= 1.6.4 - Missing Authorization to Authenticated(Subscriber+) Arbitrary Option Deletion CVE-2024-1945 7.1 HighMay 2, 2024
• repute info systems arforms WordPress ARForms plugin <= 6.4 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-32702 7.1 HighApril 24, 2024
• repute info systems arforms WordPress ARForms plugin <= 6.4 - Subscriber+ SQL Injection vulnerability CVE-2024-32706 8.5 HighApril 24, 2024
• contact form - repute infosystems arforms form builder WordPress ARForms Form Builder plugin <= 1.6.1 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-31272 6.3 MediumApril 12, 2024
• reputeinfosystems armember, arforms, armember – membership plugin, content restriction, member levels, user profile & user signup +2 more ARMember <= 4.0.24 - Improper Access Control to Sensitive Information Exposure via REST API CVE-2024-0969 5.3 MediumFebruary 5, 2024
• reputeinfosystems arforms form builder, contact form, survey, quiz & popup form builder – arforms +1 more ARForms <= 1.5.8 - Unauthenticated Stored Cross-Site Scripting via arf_http_referrer_url CVE-2023-6828 7.2 HighJanuary 11, 2024
• contact form - repute infosystems arforms form builder WordPress ARForms Form Builder Plugin <= 1.5.5 is vulnerable to Cross Site Scripting (XSS) CVE-2022-45838 6.1 MediumApril 18, 2023
• reputeinfosystems contact form, survey & popup form plugin for wordpress – arforms form builder, contact form\, survey \& popup form plugin for wordpress - arforms form builder +1 more ARForms Form Builder < 1.5 - Admin+ Stored Cross Site Scripting CVE-2021-24718 4.8 MediumDecember 6, 2021
• reputeinfosystems arforms In the ARforms plugin 3.7.1 for WordPress, arf_delete_file in arformcontroller.php allows... CVE-2019-16902 Public exploit 7.5 HighSeptember 27, 2019
• reputeinfosystems repute arforms An issue was discovered in Repute ARForms 3.5.1 and prior. An attacker is able to delete any file... CVE-2018-15818 7.5 HighMarch 17, 2019