WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
arforms
Published
2018-10-27
Title
ARForms < 3.5.2 - Unauthenticated Arbitrary File Deletion
Slug
arforms
Published
2019-10-11
Title
ArForms < 4.0 - Unauthenticated Arbitrary File Deletion via Traversal
Slug
arforms
Published
2024-04-22
Title
ARForms < 6.4.1 - Missing Authorization to Arbitrary File Deletion
Slug
arforms
Published
2024-04-22
Title
ARForms < 6.4.1 - Missing Authorization to Arbitrary Option Deletion
Slug
arforms
Published
2024-04-22
Title
ARforms < 6.4.1 - Authenticated (Subscriber+) SQL Injection
Slug
arforms
Published
2024-04-22
Title
ARforms < 6.4.1 - Reflected Cross-Site Scripting
Slug
arforms
Published
2024-04-22
Title
ARForms < 6.4.1 - Missing Authorization to Arbitrary Plugin Activation/Deactivation
Slug
arforms
Published
2024-05-17
Title
ArForms < 6.6 - Unauthenticated RCE
Slug
arforms
Published
2024-05-17
Title
ArForms < 6.6 - Admin+ Stored XSS
Slug
arforms
Published
2024-05-22
Title
Arforms < 6.4.1 - Reflected XSS
Slug
arforms
Published
2024-12-02
Title
ARForms <= 6.4.1 - Directory Traversal to Authenticated (Subscriber+) Arbitrary File Read
Slug
arforms
Published
2024-12-02
Title
ARForms <= 6.4.1 - Missing Authorization to Plugin Settings Change
Slug
arforms-form-builder
Published
2021-11-02
Title
ARForms Form Builder < 1.5 - Admin+ Stored Cross Site Scripting
Slug
arforms-form-builder
Published
2022-11-23
Title
ARForms Form Builder < 1.5.7 - Unauthenticated Stored XSS
Slug
arforms-form-builder
Published
2024-01-03
Title
ARForms < 1.5.9 - Unauthenticated Stored XSS
Slug
arforms-form-builder
Published
2024-04-05
Title
ARForms Form Builder < 1.6.2 - Cross-Site Request Forgery
Slug
arforms-form-builder
Published
2024-04-05
Title
ARForms Form Builder < 1.6.2 - Missing Authorization
Slug
arforms-form-builder
Published
2024-04-25
Title
ARForms Form Builder < 1.6.5 - Missing Authorization to Authenticated(Subscriber+) Arbitrary Option Deletion
Slug
arforms-form-builder
Published
2024-07-09
Title
ARForms Form Builder < 1.6.8 - Reflected Cross-Site Scripting
Slug
arforms-form-builder
Published
2024-12-05
Title
ARForms Form Builder < 1.7.2 - HTML Injection
Slug
arforms-form-builder
Published
2024-09-23
Title
ARForms Builder < 1.7.1 - Unauthenticated Stored XSS
Slug
ari-cf7-connector
Published
2024-01-09
Title
Contact Form 7 Connector < 1.2.3 - Reflected XSS
Slug
ari-cf7-connector
Published
2024-02-05
Title
Contact Form 7 Connector < 1.2.3 - Cross-Site Request Forgery
Slug
ari-fancy-lightbox
Published
2022-02-17
Title
ARI Fancy Lightbox < 1.3.9 - Reflected Cross-Site Scripting
Slug
ari-fancy-lightbox
Published
2024-09-25
Title
ARI Fancy Lightbox < 1.3.18 - Authenticated (Author+) Stored Cross-Site Scripting