# cve.now: Reputeinfosystems

The newest entries naming Reputeinfosystems as an affected vendor (up to 200), of 40 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-42417](https://cve.now/CVE-2026-42417.md): WordPress ARMember Premium plugin \<= 7.8 - SQL Injection vulnerability (CVSS 9.3)
- [CVE-2026-39766](https://cve.now/CVE-2026-39766.md): WordPress ARForms plugin \<= 7.1.2 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2024-13784](https://cve.now/CVE-2024-13784.md): Contact Form, Survey, Quiz & Popup Form Builder – ARForms \<= 1.8.5 - Unauthenticated PHP Object Injection (CVSS 9.8)
- [CVE-2026-15302](https://cve.now/CVE-2026-15302.md): ARMember \<= 4.0.27 - Directory Traversal via X-FILENAME (CVSS 5.3)
- [CVE-2026-7649](https://cve.now/CVE-2026-7649.md): ARMember \<= 4.0.60 - Unauthenticated SQL Injection via 'orderby' Parameter (CVSS 7.5)
- [CVE-2024-13785](https://cve.now/CVE-2024-13785.md): Contact Form, Survey, Quiz & Popup Form Builder – ARForms \<= 1.7.2 - Unauthenticated Blind Arbitrary Shortcode Execution (CVSS 5.6)
- [CVE-2025-31911](https://cve.now/CVE-2025-31911.md): WordPress Social Share And Social Locker plugin \<= 1.4.2 - SQL Injection vulnerability (CVSS 9.3)
- [CVE-2025-31902](https://cve.now/CVE-2025-31902.md): WordPress Social Share And Social Locker Plugin \<= 1.4.1 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2025-31910](https://cve.now/CVE-2025-31910.md): WordPress BookingPress plugin \<= 1.1.28 - SQL Injection vulnerability (CVSS 7.6)
- [CVE-2025-26731](https://cve.now/CVE-2025-26731.md): WordPress ARPrice plugin \<= 4.1.3 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2025-24732](https://cve.now/CVE-2025-24732.md): WordPress BookingPress Plugin \<= 1.1.25 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2024-49700](https://cve.now/CVE-2024-49700.md): WordPress ARPrice plugin \<= 4.1.3 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2024-49699](https://cve.now/CVE-2024-49699.md): WordPress ARPrice plugin \<= 4.1.3 - PHP Object Injection vulnerability (CVSS 8.8)
- [CVE-2024-49688](https://cve.now/CVE-2024-49688.md): WordPress ARPrice plugin \<= 4.1.3 - Unauthenticated PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2024-49666](https://cve.now/CVE-2024-49666.md): WordPress ARPrice plugin \<= 4.1.3 - SQL Injection vulnerability (CVSS 8.5)
- [CVE-2024-49655](https://cve.now/CVE-2024-49655.md): WordPress ARPrice plugin \<= 4.1.3 - Unauthenticated SQL Injection vulnerability (CVSS 9.3)
- [CVE-2024-11726](https://cve.now/CVE-2024-11726.md): Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress \<= 1.1.21 - Authenticated (Contributor+) SQL Injection (CVSS 6.5)
- [CVE-2024-54217](https://cve.now/CVE-2024-54217.md): WordPress ARForms plugin \<= 6.4.1 - Subscriber+ Plugin Settings Change vulnerability (CVSS 5.4)
- [CVE-2024-54223](https://cve.now/CVE-2024-54223.md): WordPress ARForms plugin \<= 1.7.1 - HTML Injection vulnerability (CVSS 5.3)
- [CVE-2024-54216](https://cve.now/CVE-2024-54216.md): WordPress ARForms plugin \< 7.0.2 - Path Traversal vulnerability (CVSS 7.7)
- [CVE-2024-10681](https://cve.now/CVE-2024-10681.md): ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup \<= 4.0.51 - Authenticated (Subscriber+) Arbitrary Shortcode Execution (CVSS 6.3)
- [CVE-2024-10540](https://cve.now/CVE-2024-10540.md): Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress \<= 1.1.16 - Authenticated (Subscriber+) SQL Injection (CVSS 5.3)
- [CVE-2024-7703](https://cve.now/CVE-2024-7703.md): ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup \<= 4.0.37 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Upload (CVSS 6.4)
- [CVE-2024-7350](https://cve.now/CVE-2024-7350.md): Appointment Booking Calendar Plugin and Online Scheduling Plugin – BookingPress 1.1.6 - 1.1.7 - Authentication Bypass to Account Takeover (CVSS 9.8)
- [CVE-2024-6467](https://cve.now/CVE-2024-6467.md): BookingPress Appointment Booking \<= 1.1.5 - Authenticated (Subscriber+) Arbitrary File Read to Arbitrary File Creation (CVSS 8.8)
- [CVE-2024-6660](https://cve.now/CVE-2024-6660.md): BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin \<= 1.1.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update and Arbitrary File Upload (CVSS 8.8)
- [CVE-2024-32703](https://cve.now/CVE-2024-32703.md): WordPress ARForms plugin \<= 6.4 - Subscriber+ Arbitrary File Deletion vulnerability (CVSS 7.7)
- [CVE-2024-32704](https://cve.now/CVE-2024-32704.md): WordPress ARForms plugin \<= 6.4 - Subscriber+ Arbitrary WordPress Options Removal vulnerability (CVSS 7.1)
- [CVE-2024-32705](https://cve.now/CVE-2024-32705.md): WordPress ARForms plugin \<= 6.4 - Subscriber+ Arbitrary Plugin Activation/Deactivation Vulnerability (CVSS 7.1)
- [CVE-2024-4133](https://cve.now/CVE-2024-4133.md): ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup \<= 4.0.30 - Open Redirect (CVSS 6.1)
- [CVE-2024-1945](https://cve.now/CVE-2024-1945.md): ARForms Form Builder \<= 1.6.4 - Missing Authorization to Authenticated(Subscriber+) Arbitrary Option Deletion (CVSS 7.1)
- [CVE-2024-32702](https://cve.now/CVE-2024-32702.md): WordPress ARForms plugin \<= 6.4 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2024-32706](https://cve.now/CVE-2024-32706.md): WordPress ARForms plugin \<= 6.4 - Subscriber+ SQL Injection vulnerability (CVSS 8.5)
- [CVE-2024-3022](https://cve.now/CVE-2024-3022.md): BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin \<= 1.0.87 - Authenticated (Admin+) Arbitrary File Upload (CVSS 7.2)
- [CVE-2024-0969](https://cve.now/CVE-2024-0969.md): ARMember \<= 4.0.24 - Improper Access Control to Sensitive Information Exposure via REST API (CVSS 5.3)
- [CVE-2023-6828](https://cve.now/CVE-2023-6828.md): ARForms \<= 1.5.8 - Unauthenticated Stored Cross-Site Scripting via arf\_http\_referrer\_url (CVSS 7.2)
- [CVE-2023-6219](https://cve.now/CVE-2023-6219.md): BookingPress \<= 1.0.76 - Authenticated (Administrator+) Arbitrary File Upload (CVSS 7.2)
- [CVE-2023-3996](https://cve.now/CVE-2023-3996.md): ARMember Lite - Membership Plugin \<= 4.0.16 - Authenticated (Administrator+) Stored Cross-Site Scripting (CVSS 4.4)
- [CVE-2023-3011](https://cve.now/CVE-2023-3011.md): ARMember \<= 4.0.5 - Cross-Site Request Forgery (CVSS 6.5)
- [CVE-2022-42888](https://cve.now/CVE-2022-42888.md): WordPress ARMember Plugin \<= 5.5.1 is vulnerable to Privilege Escalation (CVSS 9.8)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/reputeinfosystems
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.