# cve.now: Repute Infosystems

The newest entries naming Repute Infosystems as an affected vendor (up to 200), of 28 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-68566](https://cve.now/CVE-2026-68566.md): WordPress BookingPress Appointment Booking Pro plugin \<= 6.0.2 - SQL Injection vulnerability (CVSS 9.3)
- [CVE-2026-27060](https://cve.now/CVE-2026-27060.md): WordPress ARMember Premium plugin \< 7.6 - PHP Object Injection vulnerability (CVSS 8.8)
- [CVE-2026-11823](https://cve.now/CVE-2026-11823.md): BookingPress Appointment Booking Pro \<= 5.7.1 - Unauthenticated SQL Injection via 'store\_service\_date' Parameter (CVSS 7.5)
- [CVE-2026-57338](https://cve.now/CVE-2026-57338.md): WordPress ARForms plugin \<= 7.1.2 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2026-6960](https://cve.now/CVE-2026-6960.md): BookingPress Pro \<= 5.6 - Unauthenticated Arbitrary File Upload via Signature Custom Field (CVSS 9.8)
- [CVE-2022-47425](https://cve.now/CVE-2022-47425.md): WordPress ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup plugin \<= 3.4.10 - Broken Access Control (CVSS 4.3)
- [CVE-2023-39994](https://cve.now/CVE-2023-39994.md): WordPress ARMember Premium plugin \<= 5.9.2 - Broken Access Control (CVSS 4.3)
- [CVE-2022-47424](https://cve.now/CVE-2022-47424.md): WordPress ARMember plugin \<= 4.0.5 - Cross Site Request Forgery (CSRF) (CVSS 5.4)
- [CVE-2024-37920](https://cve.now/CVE-2024-37920.md): WordPress ARForms Form Builder plugin \<= 1.6.7 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2024-34799](https://cve.now/CVE-2024-34799.md): WordPress BookingPress plugin \<= 1.0.82 - Appointment Duration Manipulation vulnerability (CVSS 6.5)
- [CVE-2023-47837](https://cve.now/CVE-2023-47837.md): WordPress ARMember plugin \<= 4.0.10 - Membership Plan Bypass vulnerability (CVSS 8.3)
- [CVE-2023-51356](https://cve.now/CVE-2023-51356.md): WordPress ARMember plugin \<= 4.0.10 - Privilege Escalation vulnerability (CVSS 8.8)
- [CVE-2024-31270](https://cve.now/CVE-2024-31270.md): WordPress ARForms Form Builder plugin \<= 1.6.1 - Broken Access Control vulnerability (CVSS 7.6)
- [CVE-2023-51405](https://cve.now/CVE-2023-51405.md): WordPress BookingPress plugin \<= 1.0.74 - Booking Price Manipulation vulnerability (CVSS 8.2)
- [CVE-2024-32948](https://cve.now/CVE-2024-32948.md): WordPress ARMember – Membership Plugin plugin \<= 4.0.28 - Broken Access Control vulnerability (CVSS 9.1)
- [CVE-2024-31272](https://cve.now/CVE-2024-31272.md): WordPress ARForms Form Builder plugin \<= 1.6.1 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 6.3)
- [CVE-2024-31296](https://cve.now/CVE-2024-31296.md): WordPress BookingPress plugin \<= 1.0.81 - Insecure Direct Object References (IDOR) vulnerability (CVSS 4.3)
- [CVE-2024-30222](https://cve.now/CVE-2024-30222.md): WordPress ARMember plugin \<= 4.0.26 - PHP Object Injection vulnerability (CVSS 8.5)
- [CVE-2024-30223](https://cve.now/CVE-2024-30223.md): WordPress ARMember plugin \<= 4.0.26 - Unauthenticated PHP Object Injection vulnerability (CVSS 9.0)
- [CVE-2024-27995](https://cve.now/CVE-2024-27995.md): WordPress ARMember plugin \<= 4.0.23 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9)
- [CVE-2023-52200](https://cve.now/CVE-2023-52200.md): WordPress ARMember Plugin \<= 4.0.22 is vulnerable to Cross Site Request Forgery (CSRF) leading to PHP Object Injection (CVSS 9.6)
- [CVE-2023-50841](https://cve.now/CVE-2023-50841.md): WordPress BookingPress Plugin \<= 1.0.72 is vulnerable to SQL Injection (CVSS 8.5)
- [CVE-2023-36507](https://cve.now/CVE-2023-36507.md): WordPress BookingPress Plugin \<= 1.0.64 is vulnerable to Sensitive Data Exposure (CVSS 5.3)
- [CVE-2022-46808](https://cve.now/CVE-2022-46808.md): WordPress ARMember Plugin \<= 3.4.11 is vulnerable to SQL Injection (CVSS 8.2)
- [CVE-2022-47421](https://cve.now/CVE-2022-47421.md): WordPress ARMember (free) and ARMember (premium) plugins - vulnerable to Auth. Stored Cross Site Scripting (XSS) (CVSS 5.9)
- [CVE-2023-33323](https://cve.now/CVE-2023-33323.md): WordPress ARMember Plugin \<= 4.0.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9)
- [CVE-2022-47140](https://cve.now/CVE-2022-47140.md): WordPress ARMember Plugin \<= 4.0.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1)
- [CVE-2022-45838](https://cve.now/CVE-2022-45838.md): WordPress ARForms Form Builder Plugin \<= 1.5.5 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.1)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/repute-infosystems
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.