Known Vulnerabilities for ARforms by Na
Listed below are 5 of the newest known vulnerabilities associated with "ARforms" by "Na".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-111190 json | The ARForms plugin for WordPress is vulnerable to arbitrary file upload in all versions up to, and including, 7.2.4 via its f... | Not Provided | 2026-11-11 | 2026-11-12 |
| CVE-2026-39766 json | Unauthenticated Cross Site Scripting (XSS) in ARForms <= 7.1.2 versions. | Not Provided | 2026-10-06 | 2026-10-06 |
| CVE-2026-12427 json | The ARforms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'description' parameter in all versions... | Not Provided | 2026-11-11 | 2026-11-11 |
| CVE-2026-12424 json | The ARforms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Referer Header in all versions up to, and i... | Not Provided | 2026-11-11 | 2026-11-11 |
| CVE-2024-13784 json | The Contact Form, Survey, Quiz & Popup Form Builder – ARForms plugin for WordPress is vulnerable to PHP Object Injection in... | Not Provided | 2026-08-16 | 2026-08-17 |