9.8
Critical
CVE-2024-4620 The ARForms - Premium WordPress Form Builder Plugin WordPress plugin before 6.6 allows unauthenticated users to modify…
Description
The ARForms - Premium WordPress Form Builder Plugin WordPress plugin before 6.6 allows unauthenticated users to modify uploaded files in such a way that PHP code can be uploaded when an upload file input is included on a form
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ARForms - Premium WordPress Form Builder Plugin 6.6 | earliest → < 6.6 | 6.6 |
| arforms_form_builder 6.6 | earliest → < 6.6 | 6.6 |