5.6
Moyenne
CVE-2024-13785 The The Contact Form, Survey, Quiz & Popup Form Builder – ARForms plugin for WordPress is vulnerable to arbitrary…
Description
The The Contact Form, Survey, Quiz & Popup Form Builder – ARForms plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.7.2. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Contact Form, Survey, Quiz & Popup Form Builder – ARForms 1.7 | premières → 1.7.2 | Pas de correctif indiqué |
Autres CVE de Contact Form, Survey, Quiz & Popup Form Builder – ARForms
Les 4 CVE de Contact Form, Survey, Quiz & Popup Form Builder – ARForms →
CVE-2024-13784
The Contact Form, Survey, Quiz & Popup Form Builder – ARForms plugin for WordPress is vulnerable to PHP Object Injection…
9.8
Critique
CVE-2024-1945
The Contact Form, Survey & Popup Form Plugin for WordPress – ARForms Form Builder plugin for WordPress is vulnerable to…
7.1
Élevée
CVE-2023-6828
The Contact Form, Survey & Popup Form Plugin for WordPress – ARForms Form Builder plugin for WordPress is vulnerable to…
7.2
Élevée