PatchTheCVEarforms vulnerabilities and fixes
Recent CVEs affecting arforms, with upgrade or downgrade steps. 11 tracked.
arforms has 11 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 11. Most recent: 2025-05-15. Highest priority: CVE-2024-4620 (score 69/100).
- CVE-2024-54216 HIGH 7.7 UPGRADE Path Traversal: '.../...//' vulnerability in reputeinfosystems ARForms allows Path Traversal. This issue affe
- CVE-2024-54217 MEDIUM 5.4 UPGRADE Missing Authorization vulnerability in reputeinfosystems ARForms arforms.This issue affects ARForms: from n/a
- CVE-2024-4621 MEDIUM 4.8 UPGRADE The ARForms - Premium WordPress Form Builder Plugin WordPress plugin before 6.6 does not sanitise and escape s
- CVE-2024-4620 CRITICAL 9.8 UPGRADE The ARForms - Premium WordPress Form Builder Plugin WordPress plugin before 6.6 allows unauthenticated users t
- CVE-2024-32706 HIGH 8.5 UPGRADE Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in reputein
- CVE-2024-32705 HIGH 7.1 UPGRADE Missing Authorization vulnerability in reputeinfosystems ARForms arforms.This issue affects ARForms: from n/a
- CVE-2024-32704 HIGH 7.1 UPGRADE Missing Authorization vulnerability in reputeinfosystems ARForms arforms.This issue affects ARForms: from n/a
- CVE-2024-32703 HIGH 7.7 UPGRADE Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in reputeinfosyst
- CVE-2024-32702 HIGH 7.1 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in reputein
- CVE-2024-10504 MEDIUM 5.4 UPGRADE The Contact Form, Survey, Quiz & Popup Form Builder WordPress plugin before 1.7.1 does not sanitise and escap
- CVE-2024-0427 MEDIUM 6.3 UPGRADE The ARForms - Premium WordPress Form Builder Plugin WordPress plugin before 6.4.1 does not properly escape use
FAQ
How do I fix arforms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is arforms being exploited right now?
None of the tracked arforms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which arforms CVE should I patch first?
CVE-2024-4620 currently ranks highest (69/100): The ARForms - Premium WordPress Form Builder Plugin WordPress plugin before 6.6 allows unauthenticated users t.