CVE-2018-15818: Reputeinfosystems Repute Arforms

High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days.

An issue was discovered in Repute ARForms 3.5.1 and prior. An attacker is able to delete any file on the server with web server privileges by sending a malicious request to admin-ajax.php.

Affected products

• Reputeinfosystems Repute Arforms: up to and including 3.5.1

Published 2019-03-21. Last modified 2026-06-17.