ARforms

Explore ARforms vulnerabilities across all versions. Currently tracking 15 known vulnerabilities, including severity, impact, and patch status.

Avg CVSSMedium

6.7/ 10

Patch Coverage73%

Open

Fixed

Get automatic notifications for all ARforms vulnerabilities before they are exploited.

Vulnerability Records

15 records


2026-07-22 18:42	ARforms <= 7.2.1 - Unauthenticated Stored Cross-Site Scripting via 'password' Field Values ARforms <= 7.2.1	`CVE-2026-12421`	7.2 High	Luc Huynh from Noventiq RedTeam	No
2026-06-29 00:00	ARforms <= 7.1.2 - Reflected Cross-Site Scripting ARforms <= 7.1.2	`CVE-2026-57338`	6.1 Medium	dutafi	Yes
2026-06-23 13:57	ARForms <= 7.1.3 - Unauthenticated Stored Cross-Site Scripting via 'value' Parameter ARforms <= 7.1.3	`CVE-2026-3652`	7.2 High	h0xilo	No
2024-12-02 00:00	ARForms <= 6.4.1 - Directory Traversal to Authenticated (Subscriber+) Arbitrary File Read ARforms <= 6.4.1	`CVE-2024-54216`	7.7 High	Dave Jong	No
2024-12-02 00:00	ARForms <= 6.4.1 - Missing Authorization to Plugin Settings Change ARforms <= 6.4.1	`CVE-2024-54217`	5.4 Medium	Dave Jong	No
2024-05-22 00:00	ARForms - Premium WordPress Form Builder <= 6.4.0 - Reflected Cross-Site Scripting ARforms <= 6.4.0	`CVE-2024-0427`	6.1 Medium	Thura Moe Myint (mgthuramoemyint)	Yes
2024-05-17 00:00	ARForms Form Builder <= 6.5 - Unauthenticated Arbitrary File Upload ARforms <= 6.5	`CVE-2024-4620`	10.0 Critical	Thura Moe Myint (mgthuramoemyint)	Yes
2024-05-17 00:00	ARforms <= 6.5 - Authenticated (Admin+) Stored Cross-Site Scripting ARforms <= 6.5	`CVE-2024-4621`	4.4 Medium	Bob Matyas	Yes
2024-04-22 00:00	ARForms <= 6.4 - Missing Authorization to Arbitrary File Deletion ARforms <= 6.4	`CVE-2024-32703`	8.1 High	Dave Jong	Yes
2024-04-22 00:00	ARForms <= 6.4 - Missing Authorization to Arbitrary Option Deletion ARforms <= 6.4	`CVE-2024-32704`	4.3 Medium	Dave Jong	Yes

Showing 1–10 of 15 reports