Approved changes feed: RSS · Atom

cpe:2.3:a:reputeinfosystems:arforms:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorReputeinfosystems (49750278-e8bc-59c0-be32-c061c007e30f)
ProductArforms (2f526913-95df-5a7f-89e1-8e040c6474be)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-54217 vulnerable 2026-06-03 14:57:40.932430 WordPress ARForms plugin <= 6.4.1 - Subscriber+ Plugin Settings Change vulnerability
MEDIUM (5.4)
Missing Authorization vulnerability in reputeinfosystems ARForms arforms.This issue affects ARForms: from n/a through <= 6.4.1.
Published: 2024-12-09T12:58:59.338Z
Updated: 2026-04-28T16:10:47.195Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-54216 vulnerable 2026-06-03 14:57:40.929101 WordPress ARForms plugin <= 6.4.1 - Subscriber+ Arbitrary File Read vulnerability
HIGH (7.7)
Path Traversal: '.../...//' vulnerability in reputeinfosystems ARForms arforms allows Path Traversal.This issue affects ARForms: from n/a through <= 6.4.1.
Published: 2024-12-06T13:07:17.500Z
Updated: 2026-04-28T16:10:47.190Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32706 vulnerable 2026-06-03 14:55:47.793062 WordPress ARForms plugin <= 6.4 - Subscriber+ SQL Injection vulnerability
HIGH (8.5)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in reputeinfosystems ARForms arforms.This issue affects ARForms: from n/a through <= 6.4.
Published: 2024-04-24T08:12:03.672Z
Updated: 2026-04-28T16:09:39.485Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32705 vulnerable 2026-06-03 14:55:47.791043 WordPress ARForms plugin <= 6.4 - Subscriber+ Arbitrary Plugin Activation/Deactivation Vulnerability
HIGH (7.1)
Missing Authorization vulnerability in reputeinfosystems ARForms arforms.This issue affects ARForms: from n/a through <= 6.4.
Published: 2024-06-09T17:10:07.499Z
Updated: 2026-04-28T16:09:39.562Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32704 vulnerable 2026-06-03 14:55:47.790673 WordPress ARForms plugin <= 6.4 - Subscriber+ Arbitrary WordPress Options Removal vulnerability
HIGH (7.1)
Missing Authorization vulnerability in reputeinfosystems ARForms arforms.This issue affects ARForms: from n/a through <= 6.4.
Published: 2024-06-09T17:11:25.567Z
Updated: 2026-04-28T16:09:39.452Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32703 vulnerable 2026-06-03 14:55:47.790184 WordPress ARForms plugin <= 6.4 - Subscriber+ Arbitrary File Deletion vulnerability
HIGH (7.7)
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in reputeinfosystems ARForms arforms.This issue affects ARForms: from n/a through <= 6.4.
Published: 2024-06-09T17:17:52.524Z
Updated: 2026-04-28T16:09:39.362Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32702 vulnerable 2026-06-03 14:55:47.788871 WordPress ARForms plugin <= 6.4 - Reflected Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in reputeinfosystems ARForms arforms.This issue affects ARForms: from n/a through <= 6.4.
Published: 2024-04-24T10:13:23.385Z
Updated: 2026-04-28T16:09:39.322Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.