Log in Start free

Repute InfoSystems

Products

ProductCVEsExploitedLatest
ARMember10–Dec 9, 2025
ARMember (premium)4–Jul 2, 2026
ARForms Form Builder4–Jul 20, 2024
BookingPress3–Jun 11, 2024
BookingPress Appointment Booking Pro3–Aug 20, 2026
ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup2–Mar 21, 2024
BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin2–Dec 28, 2023
ARMember (free)1–Jul 18, 2023
ARForms1–Jun 29, 2026

Exploited and recent CVEs

  • CVE-2026-68566 Critical 9.3 WordPress BookingPress Appointment Booking Pro plugin <= 6.0.2 - SQL Injection vulnerability 0.4%
  • CVE-2026-27060 High 8.8 WordPress ARMember Premium plugin < 7.6 - PHP Object Injection vulnerability 0.5%
  • CVE-2026-11823 High 7.5 BookingPress Appointment Booking Pro <= 5.7.1 - Unauthenticated SQL Injection via 'store_service_date' Parameter 0.5%
  • CVE-2026-57338 High 7.1 WordPress ARForms plugin <= 7.1.2 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-6960 Critical 9.8 BookingPress Pro <= 5.6 - Unauthenticated Arbitrary File Upload via Signature Custom Field 0.7%
  • CVE-2022-47425 Medium 4.3 WordPress ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup plugin <= 3.4.10 - Broken Access Control 0.3%
  • CVE-2023-39994 Medium 4.3 WordPress ARMember Premium plugin <= 5.9.2 - Broken Access Control 0.4%
  • CVE-2022-47424 Medium 5.4 WordPress ARMember plugin <= 4.0.5 - Cross Site Request Forgery (CSRF) 0.2%
  • CVE-2022-47424 Medium 5.4 WordPress ARMember plugin <= 4.0.5 - Cross Site Request Forgery (CSRF) 0.2%
  • CVE-2024-37920 High 7.1 WordPress ARForms Form Builder plugin <= 1.6.7 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-34799 Medium 6.5 WordPress BookingPress plugin <= 1.0.82 - Appointment Duration Manipulation vulnerability 0.4%
  • CVE-2023-47837 High 8.3 WordPress ARMember plugin <= 4.0.10 - Membership Plan Bypass vulnerability 0.4%
  • CVE-2023-51356 High 8.8 WordPress ARMember plugin <= 4.0.10 - Privilege Escalation vulnerability 0.6%
  • CVE-2024-31270 High 7.6 WordPress ARForms Form Builder plugin <= 1.6.1 - Broken Access Control vulnerability 0.4%
  • CVE-2023-51405 High 8.2 WordPress BookingPress plugin <= 1.0.74 - Booking Price Manipulation vulnerability 0.7%
  • CVE-2024-32948 Critical 9.1 WordPress ARMember – Membership Plugin plugin <= 4.0.28 - Broken Access Control vulnerability 0.6%
  • CVE-2024-31272 Medium 6.3 WordPress ARForms Form Builder plugin <= 1.6.1 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2024-31296 Medium 4.3 WordPress BookingPress plugin <= 1.0.81 - Insecure Direct Object References (IDOR) vulnerability 0.3%
  • CVE-2024-30222 High 8.5 WordPress ARMember plugin <= 4.0.26 - PHP Object Injection vulnerability 0.6%
  • CVE-2024-30223 Critical 9.0 WordPress ARMember plugin <= 4.0.26 - Unauthenticated PHP Object Injection vulnerability 0.6%
  • CVE-2024-27995 Medium 5.9 WordPress ARMember plugin <= 4.0.23 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2023-52200 Critical 9.6 WordPress ARMember Plugin <= 4.0.22 is vulnerable to Cross Site Request Forgery (CSRF) leading to PHP Object Injection 0.3%
  • CVE-2023-50841 High 8.5 WordPress BookingPress Plugin <= 1.0.72 is vulnerable to SQL Injection 0.5%
  • CVE-2023-36507 Medium 5.3 WordPress BookingPress Plugin <= 1.0.64 is vulnerable to Sensitive Data Exposure 0.6%
  • CVE-2022-46808 High 8.2 WordPress ARMember Plugin <= 3.4.11 is vulnerable to SQL Injection 0.6%
  • CVE-2022-47421 Medium 5.9 WordPress ARMember (free) and ARMember (premium) plugins - vulnerable to Auth. Stored Cross Site Scripting (XSS) 0.4%
  • CVE-2022-47421 Medium 5.9 WordPress ARMember (free) and ARMember (premium) plugins - vulnerable to Auth. Stored Cross Site Scripting (XSS) 0.4%
  • CVE-2023-33323 Medium 5.9 WordPress ARMember Plugin <= 4.0.2 is vulnerable to Cross Site Scripting (XSS) 0.4%
  • CVE-2022-47140 High 7.1 WordPress ARMember Plugin <= 4.0.1 is vulnerable to Cross Site Scripting (XSS) 0.4%
  • CVE-2022-45838 Medium 6.1 WordPress ARForms Form Builder Plugin <= 1.5.5 is vulnerable to Cross Site Scripting (XSS) 0.4%