Reputeinfosystems

Arforms

15 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2024-4620

Exploit
  • EPSS 3.35%
  • Veröffentlicht 07.06.2024 06:15:11
  • Zuletzt bearbeitet 01.05.2025 19:47:03

The ARForms - Premium WordPress Form Builder Plugin WordPress plugin before 6.6 allows unauthenticated users to modify uploaded files in such a way that PHP code can be uploaded when an upload file input is included on a form

4.8

CVE-2024-4621

Exploit
  • EPSS 0.35%
  • Veröffentlicht 07.06.2024 06:15:11
  • Zuletzt bearbeitet 01.05.2025 19:46:27

The ARForms - Premium WordPress Form Builder Plugin WordPress plugin before 6.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfil...

6.1

CVE-2024-32702

  • EPSS 0.36%
  • Veröffentlicht 24.04.2024 11:15:47
  • Zuletzt bearbeitet 23.04.2026 15:18:18

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in reputeinfosystems ARForms arforms.This issue affects ARForms: from n/a through <= 6.4.

8.8

CVE-2024-32706

  • EPSS 0.57%
  • Veröffentlicht 24.04.2024 09:15:06
  • Zuletzt bearbeitet 23.04.2026 15:18:20

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in reputeinfosystems ARForms arforms.This issue affects ARForms: from n/a through <= 6.4.

7.5

CVE-2019-16902

  • EPSS 9.73%
  • Veröffentlicht 27.09.2019 11:15:10
  • Zuletzt bearbeitet 21.11.2024 04:31:18

In the ARforms plugin 3.7.1 for WordPress, arf_delete_file in arformcontroller.php allows unauthenticated deletion of an arbitrary file by supplying the full pathname.