Reputeinfosystems vulnerabilities
40 CVEs and advisories name Reputeinfosystems as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-42417WordPress ARMember Premium plugin <= 7.8 - SQL Injection vulnerability
- CVE-2026-39766WordPress ARForms plugin <= 7.1.2 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-13784Contact Form, Survey, Quiz & Popup Form Builder – ARForms <= 1.8.5 - Unauthenticated PHP Object Injection
- CVE-2026-15302ARMember <= 4.0.27 - Directory Traversal via X-FILENAME
- CVE-2026-7649ARMember <= 4.0.60 - Unauthenticated SQL Injection via 'orderby' Parameter
- CVE-2024-13785Contact Form, Survey, Quiz & Popup Form Builder – ARForms <= 1.7.2 - Unauthenticated Blind Arbitrary Shortcode Execution
- CVE-2025-31911WordPress Social Share And Social Locker plugin <= 1.4.2 - SQL Injection vulnerability
- CVE-2025-31902WordPress Social Share And Social Locker Plugin <= 1.4.1 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2025-31910WordPress BookingPress plugin <= 1.1.28 - SQL Injection vulnerability
- CVE-2025-26731WordPress ARPrice plugin <= 4.1.3 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-24732WordPress BookingPress Plugin <= 1.1.25 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-49700WordPress ARPrice plugin <= 4.1.3 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-49699WordPress ARPrice plugin <= 4.1.3 - PHP Object Injection vulnerability
- CVE-2024-49688WordPress ARPrice plugin <= 4.1.3 - Unauthenticated PHP Object Injection vulnerability
- CVE-2024-49666WordPress ARPrice plugin <= 4.1.3 - SQL Injection vulnerability
- CVE-2024-49655WordPress ARPrice plugin <= 4.1.3 - Unauthenticated SQL Injection vulnerability
- CVE-2024-11726Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress <= 1.1.21 - Authenticated (Contributor+) SQL Injection
- CVE-2024-54217WordPress ARForms plugin <= 6.4.1 - Subscriber+ Plugin Settings Change vulnerability
- CVE-2024-54223WordPress ARForms plugin <= 1.7.1 - HTML Injection vulnerability
- CVE-2024-54216WordPress ARForms plugin < 7.0.2 - Path Traversal vulnerability
- CVE-2024-10681ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 4.0.51 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
- CVE-2024-10540Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress <= 1.1.16 - Authenticated (Subscriber+) SQL Injection
- CVE-2024-7703ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 4.0.37 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Upload
- CVE-2024-7350Appointment Booking Calendar Plugin and Online Scheduling Plugin – BookingPress 1.1.6 - 1.1.7 - Authentication Bypass to Account Takeover
- CVE-2024-6467BookingPress Appointment Booking <= 1.1.5 - Authenticated (Subscriber+) Arbitrary File Read to Arbitrary File Creation
- CVE-2024-6660BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin <= 1.1.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update and Arbitrary File Upload
- CVE-2024-32703WordPress ARForms plugin <= 6.4 - Subscriber+ Arbitrary File Deletion vulnerability
- CVE-2024-32704WordPress ARForms plugin <= 6.4 - Subscriber+ Arbitrary WordPress Options Removal vulnerability
- CVE-2024-32705WordPress ARForms plugin <= 6.4 - Subscriber+ Arbitrary Plugin Activation/Deactivation Vulnerability
- CVE-2024-4133ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 4.0.30 - Open Redirect