reputeinfosystems vulnerabilities

Recent CVEs affecting reputeinfosystems products. 29 tracked.

reputeinfosystems has 29 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 29. Most recent: 2025-12-09. Highest priority: CVE-2024-4620 (score 66/100).

• CVE-2024-54216 HIGH 7.7 UPGRADE Path Traversal: '.../...//' vulnerability in reputeinfosystems ARForms allows Path Traversal. This issue affe
• CVE-2025-31910 HIGH 7.6 UPGRADE Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in reputein
• CVE-2025-24732 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in reputein
• CVE-2024-6660 HIGH 8.8 UPGRADE The BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin plugin for WordPress is vu
• CVE-2024-6467 HIGH 8.8 UPGRADE The BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin plugin for WordPress is vu
• CVE-2024-54223 MEDIUM 5.3 UPGRADE Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in reputeinfosyste
• CVE-2024-54217 MEDIUM 5.4 UPGRADE Missing Authorization vulnerability in reputeinfosystems ARForms arforms.This issue affects ARForms: from n/a
• CVE-2024-4621 MEDIUM 4.8 UPGRADE The ARForms - Premium WordPress Form Builder Plugin WordPress plugin before 6.6 does not sanitise and escape s
• CVE-2024-4620 CRITICAL 9.8 UPGRADE The ARForms - Premium WordPress Form Builder Plugin WordPress plugin before 6.6 allows unauthenticated users t
• CVE-2024-37920 HIGH 7.1 UPGRADE Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in R
• CVE-2024-34799 MEDIUM 6.5 UPGRADE Missing Authorization vulnerability in Repute Infosystems BookingPress.This issue affects BookingPress: from n
• CVE-2024-32948 CRITICAL 9.1 UPGRADE Missing Authorization vulnerability in Repute Infosystems ARMember.This issue affects ARMember: from n/a throu
• CVE-2024-32706 HIGH 8.5 UPGRADE Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in reputein
• CVE-2024-32705 HIGH 7.1 UPGRADE Missing Authorization vulnerability in reputeinfosystems ARForms arforms.This issue affects ARForms: from n/a
• CVE-2024-32704 HIGH 7.1 UPGRADE Missing Authorization vulnerability in reputeinfosystems ARForms arforms.This issue affects ARForms: from n/a
• CVE-2024-32703 HIGH 7.7 UPGRADE Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in reputeinfosyst
• CVE-2024-32702 HIGH 7.1 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in reputein
• CVE-2024-31296 MEDIUM 4.3 UPGRADE Authorization Bypass Through User-Controlled Key vulnerability in Repute Infosystems BookingPress.This issue a
• CVE-2024-31272 MEDIUM 6.3 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in Repute InfoSystems ARForms Form Builder.This issue affects
• CVE-2024-31270 HIGH 7.6 UPGRADE Missing Authorization vulnerability in Repute InfoSystems ARForms Form Builder.This issue affects ARForms Form
• CVE-2024-11189 MEDIUM 4.8 UPGRADE The Social Share And Social Locker WordPress plugin before 1.4.2 does not sanitise and escape some of its set
• CVE-2024-10540 MEDIUM 5.3 UPGRADE The Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress plugin for WordPress is vulnerabl
• CVE-2024-10504 MEDIUM 5.4 UPGRADE The Contact Form, Survey, Quiz & Popup Form Builder WordPress plugin before 1.7.1 does not sanitise and escap
• CVE-2024-0427 MEDIUM 6.3 UPGRADE The ARForms - Premium WordPress Form Builder Plugin WordPress plugin before 6.4.1 does not properly escape use
• CVE-2023-51405 HIGH 8.2 UPGRADE Improper Authentication vulnerability in Repute Infosystems BookingPress allows Accessing Functionality Not Pr
• CVE-2023-51356 HIGH 8.8 UPGRADE Improper Privilege Management vulnerability in Repute Infosystems ARMember allows Privilege Escalation.This is
• CVE-2023-39994 MEDIUM 4.3 UPGRADE Missing Authorization vulnerability in Repute InfoSystems ARMember Premium allows Exploiting Incorrectly Confi
• CVE-2022-47425 MEDIUM 4.3 UPGRADE Missing Authorization vulnerability in Repute Infosystems ARMember allows Exploiting Incorrectly Configured Ac
• CVE-2022-47424 MEDIUM 5.4 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in Repute InfoSystems ARMember, Repute InfoSystems ARMember Pr

FAQ

How do I fix reputeinfosystems vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is reputeinfosystems being exploited right now?

None of the tracked reputeinfosystems CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which reputeinfosystems CVE should I patch first?

CVE-2024-4620 currently ranks highest (66/100): The ARForms - Premium WordPress Form Builder Plugin WordPress plugin before 6.6 allows unauthenticated users t.

Products

• arforms
• arforms form builder
• armember
• bookingpress
• social share and social locker

RSS feed for reputeinfosystems · ← Back to latest CVEs