Skip to content
Sign in
5.6 Medium

CVE-2024-13785 The The Contact Form, Survey, Quiz & Popup Form Builder – ARForms plugin for WordPress is vulnerable to arbitrary…

Description

The The Contact Form, Survey, Quiz & Popup Form Builder – ARForms plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.7.2. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.

Affected products and versions

Product Affected versions Fixed in
Contact Form, Survey, Quiz & Popup Form Builder – ARForms 1.7 earliest → 1.7.2 No fix stated

Other CVEs of Contact Form, Survey, Quiz & Popup Form Builder – ARForms

The 4 CVEs of Contact Form, Survey, Quiz & Popup Form Builder – ARForms →
CVE-2024-13784 The Contact Form, Survey, Quiz & Popup Form Builder – ARForms plugin for WordPress is vulnerable to PHP Object Injection… 9.8 Critical CVE-2024-1945 The Contact Form, Survey & Popup Form Plugin for WordPress – ARForms Form Builder plugin for WordPress is vulnerable to… 7.1 High CVE-2023-6828 The Contact Form, Survey & Popup Form Plugin for WordPress – ARForms Form Builder plugin for WordPress is vulnerable to… 7.2 High
Track this CVE