Security
فارسی
All products

arforms

WordPress · Plugin
16 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
ARforms <= 7.1.2 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-39766 arforms WordPress High No fix reported
ARForms <= 7.1.1 - Unauthenticated Stored Cross-Site Scripting via 'value' ParameterCVE-2026-3652 arforms WordPress High Fix reported
ARforms <= 7.2.1 - Unauthenticated Stored Cross-Site Scripting via 'password' Field ValuesCVE-2026-12421 arforms WordPress High Fix reported
ARforms <= 7.1.2 - Reflected Cross-Site ScriptingCVE-2026-57338 arforms WordPress Medium Fix reported
ARForms <= 6.4.1 - Directory Traversal to Authenticated (Subscriber+) Arbitrary File ReadCVE-2024-54216 arforms WordPress High No fix reported
ARForms <= 6.4.1 - Missing Authorization to Plugin Settings ChangeCVE-2024-54217 arforms WordPress Medium No fix reported
ARForms - Premium WordPress Form Builder <= 6.4.0 - Reflected Cross-Site ScriptingCVE-2024-0427 arforms WordPress Medium Fix reported
ARforms <= 6.4 - Reflected Cross-Site ScriptingCVE-2024-32702 arforms WordPress Medium Fix reported
ARforms <= 6.5 - Authenticated (Admin+) Stored Cross-Site ScriptingCVE-2024-4621 arforms WordPress Medium Fix reported
ARForms Form Builder <= 6.5 - Unauthenticated Arbitrary File UploadCVE-2024-4620 arforms WordPress Critical Fix reported
Repute ARForms <= 3.5.1 - Unauthenticated Arbitrary File Deletion via Path TraversalCVE-2018-15818 arforms WordPress High Fix reported
ARforms <= 3.7.1 - Unauthenticated Arbitrary File DeletionCVE-2019-16902 arforms WordPress High Fix reported
ARForms <= 6.4 - Missing Authorization to Arbitrary File DeletionCVE-2024-32703 arforms WordPress High Fix reported
ARForms <= 6.4 - Missing Authorization to Arbitrary Option DeletionCVE-2024-32704 arforms WordPress Medium Fix reported
ARForms <= 6.4 - Missing Authorization to Arbitrary Plugin Activation/DeactivationCVE-2024-32705 arforms WordPress Medium Fix reported
ARforms <= 6.4 - Authenticated (Subscriber+) SQL InjectionCVE-2024-32706 arforms WordPress High Fix reported