Vulnerabilities > Reputeinfosystems > High

DATE CVE VULNERABILITY TITLE RISK
2024-06-09 CVE-2024-32703 Unspecified vulnerability in Reputeinfosystems Arforms
Missing Authorization vulnerability in reputeinfosystems ARForms.This issue affects ARForms: from n/a through 6.4.
network
low complexity
reputeinfosystems
8.1
2024-06-09 CVE-2024-32705 Unspecified vulnerability in Reputeinfosystems Arforms
Missing Authorization vulnerability in reputeinfosystems ARForms.This issue affects ARForms: from n/a through 6.4.
network
low complexity
reputeinfosystems
8.8
2023-12-28 CVE-2023-50841 Unspecified vulnerability in Reputeinfosystems Bookingpress
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Repute Infosystems BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin.This issue affects BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin: from n/a through 1.0.72.
network
low complexity
reputeinfosystems
8.8
2023-11-28 CVE-2023-6219 Unrestricted Upload of File with Dangerous Type vulnerability in Reputeinfosystems Bookingpress
The BookingPress plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file validation on the 'bookingpress_process_upload' function in versions up to, and including, 1.0.76.
network
low complexity
reputeinfosystems CWE-434
7.2
2019-09-27 CVE-2019-16902 Path Traversal vulnerability in Reputeinfosystems Arforms 3.7.1
In the ARforms plugin 3.7.1 for WordPress, arf_delete_file in arformcontroller.php allows unauthenticated deletion of an arbitrary file by supplying the full pathname.
network
low complexity
reputeinfosystems CWE-22
7.5
2019-03-21 CVE-2018-15818 Improper Input Validation vulnerability in Reputeinfosystems Repute Arforms 3.5.1
An issue was discovered in Repute ARForms 3.5.1 and prior.
network
low complexity
reputeinfosystems CWE-20
7.5