https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-47425.htmlhttps://patchthecve.com/cve/CVE-2022-47425.htmlWed, 17 Jun 2026 05:13:33 +0000MEDIUM 4.3: Missing Authorization vulnerability in Repute Infosystems ARMember allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ARMember: from n/a through 3.4.10.https://patchthecve.com/cve/CVE-2024-11189.htmlhttps://patchthecve.com/cve/CVE-2024-11189.htmlWed, 17 Jun 2026 06:57:14 +0000MEDIUM 4.8: The Social Share And Social Locker WordPress plugin before 1.4.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite sehttps://patchthecve.com/cve/CVE-2024-10504.htmlhttps://patchthecve.com/cve/CVE-2024-10504.htmlWed, 17 Jun 2026 06:55:49 +0000MEDIUM 5.4: The Contact Form, Survey, Quiz & Popup Form Builder WordPress plugin before 1.7.1 does not sanitise and escape some parameters when outputting them in the page, which could allow unauthenticated users to perform Cross-Site Scripting attacks.https://patchthecve.com/cve/CVE-2025-31910.htmlhttps://patchthecve.com/cve/CVE-2025-31910.htmlWed, 17 Jun 2026 09:11:09 +0000HIGH 7.6: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in reputeinfosystems BookingPress bookingpress-appointment-booking allows SQL Injection.This issue affects BookingPress: from n/a through <= 1.1.28.https://patchthecve.com/cve/CVE-2025-24732.htmlhttps://patchthecve.com/cve/CVE-2025-24732.htmlWed, 17 Jun 2026 08:59:31 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in reputeinfosystems BookingPress bookingpress-appointment-booking allows DOM-Based XSS.This issue affects BookingPress: from n/a through <= 1.1.25.https://patchthecve.com/cve/CVE-2023-39994.htmlhttps://patchthecve.com/cve/CVE-2023-39994.htmlWed, 17 Jun 2026 06:13:08 +0000MEDIUM 4.3: Missing Authorization vulnerability in Repute InfoSystems ARMember Premium allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ARMember Premium: from n/a through 5.9.2.https://patchthecve.com/cve/CVE-2024-54223.htmlhttps://patchthecve.com/cve/CVE-2024-54223.htmlWed, 17 Jun 2026 08:09:57 +0000MEDIUM 5.3: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in reputeinfosystems ARForms Form Builder arforms-form-builder allows Code Injection.This issue affects ARForms Form Builder: from n/a through <= 1.7.1.https://patchthecve.com/cve/CVE-2024-54217.htmlhttps://patchthecve.com/cve/CVE-2024-54217.htmlWed, 17 Jun 2026 08:09:56 +0000MEDIUM 5.4: Missing Authorization vulnerability in reputeinfosystems ARForms arforms.This issue affects ARForms: from n/a through <= 6.4.1.https://patchthecve.com/cve/CVE-2024-54216.htmlhttps://patchthecve.com/cve/CVE-2024-54216.htmlTue, 07 Jul 2026 12:16:25 +0000HIGH 7.7: Path Traversal: '.../...//' vulnerability in reputeinfosystems ARForms allows Path Traversal. This issue affects ARForms: from n/a before 7.0.2.https://patchthecve.com/cve/CVE-2022-47424.htmlhttps://patchthecve.com/cve/CVE-2022-47424.htmlWed, 17 Jun 2026 05:13:33 +0000MEDIUM 5.4: Cross-Site Request Forgery (CSRF) vulnerability in Repute InfoSystems ARMember, Repute InfoSystems ARMember Premium allows Cross-Site Request Forgery.This issue affects ARMember: from n/a through 4.0.5; ARMember Premium: from n/a before 6.7.1.https://patchthecve.com/cve/CVE-2024-10540.htmlhttps://patchthecve.com/cve/CVE-2024-10540.htmlWed, 17 Jun 2026 06:55:53 +0000MEDIUM 5.3: The Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress plugin for WordPress is vulnerable to SQL Injection via the 'service' parameter of the bookingpress_form shortcode in all versions up to, and including, 1.1.16 due to insufficient escaping on the user supplied parameter andhttps://patchthecve.com/cve/CVE-2024-37920.htmlhttps://patchthecve.com/cve/CVE-2024-37920.htmlWed, 17 Jun 2026 07:39:02 +0000HIGH 7.1: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Repute InfoSystems ARForms Form Builder allows Reflected XSS.This issue affects ARForms Form Builder: from n/a through 1.6.7.https://patchthecve.com/cve/CVE-2024-6660.htmlhttps://patchthecve.com/cve/CVE-2024-6660.htmlWed, 17 Jun 2026 08:18:26 +0000HIGH 8.8: The BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the bookingpress_import_data_continue_process_func function in all vehttps://patchthecve.com/cve/CVE-2024-6467.htmlhttps://patchthecve.com/cve/CVE-2024-6467.htmlWed, 17 Jun 2026 08:18:04 +0000HIGH 8.8: The BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin plugin for WordPress is vulnerable to Arbitrary File Read to Arbitrary File Creation in all versions up to, and including, 1.1.5 via the 'bookingpress_save_lite_wizard_settings_func' function. This makes it possible https://patchthecve.com/cve/CVE-2024-0427.htmlhttps://patchthecve.com/cve/CVE-2024-0427.htmlWed, 17 Jun 2026 06:53:29 +0000MEDIUM 6.3: The ARForms - Premium WordPress Form Builder Plugin WordPress plugin before 6.4.1 does not properly escape user-controlled input when it is reflected in some of its AJAX actions.https://patchthecve.com/cve/CVE-2024-34799.htmlhttps://patchthecve.com/cve/CVE-2024-34799.htmlWed, 17 Jun 2026 07:34:05 +0000MEDIUM 6.5: Missing Authorization vulnerability in Repute Infosystems BookingPress.This issue affects BookingPress: from n/a through 1.0.82.https://patchthecve.com/cve/CVE-2024-32705.htmlhttps://patchthecve.com/cve/CVE-2024-32705.htmlWed, 17 Jun 2026 07:30:15 +0000HIGH 7.1: Missing Authorization vulnerability in reputeinfosystems ARForms arforms.This issue affects ARForms: from n/a through <= 6.4.https://patchthecve.com/cve/CVE-2024-32704.htmlhttps://patchthecve.com/cve/CVE-2024-32704.htmlWed, 17 Jun 2026 07:30:15 +0000HIGH 7.1: Missing Authorization vulnerability in reputeinfosystems ARForms arforms.This issue affects ARForms: from n/a through <= 6.4.https://patchthecve.com/cve/CVE-2024-32703.htmlhttps://patchthecve.com/cve/CVE-2024-32703.htmlWed, 17 Jun 2026 07:30:15 +0000HIGH 7.7: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in reputeinfosystems ARForms arforms.This issue affects ARForms: from n/a through <= 6.4.https://patchthecve.com/cve/CVE-2024-4621.htmlhttps://patchthecve.com/cve/CVE-2024-4621.htmlWed, 17 Jun 2026 08:02:16 +0000MEDIUM 4.8: The ARForms - Premium WordPress Form Builder Plugin WordPress plugin before 6.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example ihttps://patchthecve.com/cve/CVE-2024-4620.htmlhttps://patchthecve.com/cve/CVE-2024-4620.htmlWed, 17 Jun 2026 08:02:16 +0000CRITICAL 9.8: The ARForms - Premium WordPress Form Builder Plugin WordPress plugin before 6.6 allows unauthenticated users to modify uploaded files in such a way that PHP code can be uploaded when an upload file input is included on a formhttps://patchthecve.com/cve/CVE-2023-51356.htmlhttps://patchthecve.com/cve/CVE-2023-51356.htmlWed, 17 Jun 2026 06:40:47 +0000HIGH 8.8: Improper Privilege Management vulnerability in Repute Infosystems ARMember allows Privilege Escalation.This issue affects ARMember: from n/a through 4.0.10.https://patchthecve.com/cve/CVE-2024-31270.htmlhttps://patchthecve.com/cve/CVE-2024-31270.htmlWed, 17 Jun 2026 07:28:05 +0000HIGH 7.6: Missing Authorization vulnerability in Repute InfoSystems ARForms Form Builder.This issue affects ARForms Form Builder: from n/a through 1.6.1.https://patchthecve.com/cve/CVE-2023-51405.htmlhttps://patchthecve.com/cve/CVE-2023-51405.htmlWed, 17 Jun 2026 06:40:53 +0000HIGH 8.2: Improper Authentication vulnerability in Repute Infosystems BookingPress allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BookingPress: from n/a through 1.0.74.https://patchthecve.com/cve/CVE-2024-32702.htmlhttps://patchthecve.com/cve/CVE-2024-32702.htmlWed, 17 Jun 2026 07:30:15 +0000HIGH 7.1: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in reputeinfosystems ARForms arforms.This issue affects ARForms: from n/a through <= 6.4.https://patchthecve.com/cve/CVE-2024-32706.htmlhttps://patchthecve.com/cve/CVE-2024-32706.htmlWed, 17 Jun 2026 07:30:15 +0000HIGH 8.5: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in reputeinfosystems ARForms arforms.This issue affects ARForms: from n/a through <= 6.4.https://patchthecve.com/cve/CVE-2024-32948.htmlhttps://patchthecve.com/cve/CVE-2024-32948.htmlWed, 17 Jun 2026 07:30:45 +0000CRITICAL 9.1: Missing Authorization vulnerability in Repute Infosystems ARMember.This issue affects ARMember: from n/a through 4.0.28.https://patchthecve.com/cve/CVE-2024-31272.htmlhttps://patchthecve.com/cve/CVE-2024-31272.htmlWed, 17 Jun 2026 07:28:06 +0000MEDIUM 6.3: Cross-Site Request Forgery (CSRF) vulnerability in Repute InfoSystems ARForms Form Builder.This issue affects ARForms Form Builder: from n/a through 1.6.1.https://patchthecve.com/cve/CVE-2024-31296.htmlhttps://patchthecve.com/cve/CVE-2024-31296.htmlWed, 17 Jun 2026 07:28:08 +0000MEDIUM 4.3: Authorization Bypass Through User-Controlled Key vulnerability in Repute Infosystems BookingPress.This issue affects BookingPress: from n/a through 1.0.81.https://patchthecve.com/cve/CVE-2024-3022.htmlhttps://patchthecve.com/cve/CVE-2024-3022.htmlWed, 17 Jun 2026 07:43:09 +0000HIGH 7.2: The BookingPress plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient filename validation in the 'bookingpress_process_upload' function in all versions up to, and including 1.0.87. This allows an authenticated attacker with administrator-level capabilities or higher to uphttps://patchthecve.com/cve/CVE-2024-30223.htmlhttps://patchthecve.com/cve/CVE-2024-30223.htmlWed, 17 Jun 2026 07:26:31 +0000CRITICAL 9.0: Deserialization of Untrusted Data vulnerability in Repute Infosystems ARMember.This issue affects ARMember: from n/a through 4.0.26.https://patchthecve.com/cve/CVE-2024-30222.htmlhttps://patchthecve.com/cve/CVE-2024-30222.htmlWed, 17 Jun 2026 07:26:31 +0000HIGH 8.5: Deserialization of Untrusted Data vulnerability in Repute Infosystems ARMember.This issue affects ARMember: from n/a through 4.0.26.https://patchthecve.com/cve/CVE-2024-27995.htmlhttps://patchthecve.com/cve/CVE-2024-27995.htmlWed, 17 Jun 2026 07:20:44 +0000MEDIUM 5.9: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Repute Infosystems ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup allows Stored XSS.This issue affects ARMember – Membership Plugin, Content Restriction