Log in Start free

Reputeinfosystems

Products

ProductCVEsExploitedLatest
ARForms8–Oct 6, 2026
ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup8–Jul 10, 2026
Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress7–Dec 24, 2024
ARPrice6–Mar 27, 2025
Contact Form, Survey, Quiz & Popup Form Builder – ARForms4–Aug 16, 2026
Social Share And Social Locker2–Apr 3, 2025
BookingPress2–Apr 1, 2025
ARForms Form Builder1–Dec 9, 2024
ARMember1–Dec 6, 2022
ARMember Premium1–Oct 6, 2026

Exploited and recent CVEs

  • CVE-2026-42417 Critical 9.3 WordPress ARMember Premium plugin <= 7.8 - SQL Injection vulnerability 0.3%
  • CVE-2026-39766 High 7.1 WordPress ARForms plugin <= 7.1.2 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2024-13784 Critical 9.8 Contact Form, Survey, Quiz & Popup Form Builder – ARForms <= 1.8.5 - Unauthenticated PHP Object Injection 0.8%
  • CVE-2026-15302 Medium 5.3 ARMember <= 4.0.27 - Directory Traversal via X-FILENAME 0.7%
  • CVE-2026-7649 High 7.5 ARMember <= 4.0.60 - Unauthenticated SQL Injection via 'orderby' Parameter 0.3%
  • CVE-2024-13785 Medium 5.6 Contact Form, Survey, Quiz & Popup Form Builder – ARForms <= 1.7.2 - Unauthenticated Blind Arbitrary Shortcode Execution 0.3%
  • CVE-2025-31911 Critical 9.3 WordPress Social Share And Social Locker plugin <= 1.4.2 - SQL Injection vulnerability 0.4%
  • CVE-2025-31902 High 7.1 WordPress Social Share And Social Locker Plugin <= 1.4.1 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-31910 High 7.6 WordPress BookingPress plugin <= 1.1.28 - SQL Injection vulnerability 0.4%
  • CVE-2025-26731 Medium 6.5 WordPress ARPrice plugin <= 4.1.3 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-24732 Medium 6.5 WordPress BookingPress Plugin <= 1.1.25 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-49700 High 7.1 WordPress ARPrice plugin <= 4.1.3 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-49699 High 8.8 WordPress ARPrice plugin <= 4.1.3 - PHP Object Injection vulnerability 0.8%
  • CVE-2024-49688 Critical 9.8 WordPress ARPrice plugin <= 4.1.3 - Unauthenticated PHP Object Injection vulnerability 0.5%
  • CVE-2024-49666 High 8.5 WordPress ARPrice plugin <= 4.1.3 - SQL Injection vulnerability 0.4%
  • CVE-2024-49655 Critical 9.3 WordPress ARPrice plugin <= 4.1.3 - Unauthenticated SQL Injection vulnerability 0.4%
  • CVE-2024-11726 Medium 6.5 Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress <= 1.1.21 - Authenticated (Contributor+) SQL Injection 0.5%
  • CVE-2024-54217 Medium 5.4 WordPress ARForms plugin <= 6.4.1 - Subscriber+ Plugin Settings Change vulnerability 0.5%
  • CVE-2024-54223 Medium 5.3 WordPress ARForms plugin <= 1.7.1 - HTML Injection vulnerability 0.3%
  • CVE-2024-54216 High 7.7 WordPress ARForms plugin < 7.0.2 - Path Traversal vulnerability 0.6%
  • CVE-2024-10681 Medium 6.3 ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 4.0.51 - Authenticated (Subscriber+) Arbitrary Shortcode Execution 0.4%
  • CVE-2024-10540 Medium 5.3 Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress <= 1.1.16 - Authenticated (Subscriber+) SQL Injection 0.6%
  • CVE-2024-7703 Medium 6.4 ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 4.0.37 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Upload 1.1%
  • CVE-2024-7350 Critical 9.8 Appointment Booking Calendar Plugin and Online Scheduling Plugin – BookingPress 1.1.6 - 1.1.7 - Authentication Bypass to Account Takeover 0.7%
  • CVE-2024-6467 High 8.8 BookingPress Appointment Booking <= 1.1.5 - Authenticated (Subscriber+) Arbitrary File Read to Arbitrary File Creation 0.9%
  • CVE-2024-6660 High 8.8 BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin <= 1.1.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update and Arbitrary File Upload 0.6%
  • CVE-2024-32703 High 7.7 WordPress ARForms plugin <= 6.4 - Subscriber+ Arbitrary File Deletion vulnerability 0.6%
  • CVE-2024-32704 High 7.1 WordPress ARForms plugin <= 6.4 - Subscriber+ Arbitrary WordPress Options Removal vulnerability 0.3%
  • CVE-2024-32705 High 7.1 WordPress ARForms plugin <= 6.4 - Subscriber+ Arbitrary Plugin Activation/Deactivation Vulnerability 0.4%
  • CVE-2024-4133 Medium 6.1 ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 4.0.30 - Open Redirect 0.5%