CVE-2024-0427: Reputeinfosystems Arforms

Medium severity, CVSS 6.3. EPSS: 0.4% chance of exploitation in the next 30 days.

The ARForms - Premium WordPress Form Builder Plugin WordPress plugin before 6.4.1 does not properly escape user-controlled input when it is reflected in some of its AJAX actions.

Affected products

• Reputeinfosystems Arforms: before 6.4.1 (fixed in 6.4.1)

Published 2024-06-12. Last modified 2026-06-17.