Approved changes feed: RSS · Atom

cpe:2.3:a:reputeinfosystems:arforms:-:*:*:*:*:wordpress:*:*

part: a version: - update: *

VendorReputeinfosystems (49750278-e8bc-59c0-be32-c061c007e30f)
ProductArforms (2f526913-95df-5a7f-89e1-8e040c6474be)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-32706 not_vulnerable 2026-06-03 14:55:47.793005 WordPress ARForms plugin <= 6.4 - Subscriber+ SQL Injection vulnerability
HIGH (8.5)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in reputeinfosystems ARForms arforms.This issue affects ARForms: from n/a through <= 6.4.
Published: 2024-04-24T08:12:03.672Z
Updated: 2026-04-28T16:09:39.485Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0969 vulnerable 2026-06-03 14:54:04.592296 ARMember <= 4.0.24 - Improper Access Control to Sensitive Information Exposure via REST API
MEDIUM (5.3)
The ARMember plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.21 via the REST API. This makes it possible for unauthenticated attackers to bypass the plugin's "Default Restriction" feature and view restricted post content.
Published: 2024-02-05T21:22:05.137Z
Updated: 2026-04-08T17:31:00.154Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.