CVE-2024-54217mediumCWE-862

CVE-2024-54217: falha de média gravidade em reputeinfosystems ARForms

WordPress ARForms plugin <= 6.4.1 - Subscriber+ Plugin Settings Change vulnerability

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar ARForms

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.4epss 0.5%
Missing Authorization vulnerability in reputeinfosystems ARForms arforms.This issue affects ARForms: from n/a through <= 6.4.1.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Produtos afetados
reputeinfosystems · ARForms
CVEs relacionadas — reputeinfosystems ARForms

No mesmo produto, das mais perigosas para as menos.

CVE-2024-32703HIGHWordPress ARForms plugin <= 6.4 - Subscriber+ Arbitrary File Deletion vulnerabilityEPSS 0.6%CVE-2024-32706HIGHWordPress ARForms plugin <= 6.4 - Subscriber+ SQL Injection vulnerabilityEPSS 0.6%CVE-2024-54216HIGHWordPress ARForms plugin < 7.0.2 - Path Traversal vulnerabilityEPSS 0.6%CVE-2024-32705HIGHWordPress ARForms plugin <= 6.4 - Subscriber+ Arbitrary Plugin Activation/Deactivation VulnerabilityEPSS 0.4%CVE-2024-32702HIGHWordPress ARForms plugin <= 6.4 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2024-32704HIGHWordPress ARForms plugin <= 6.4 - Subscriber+ Arbitrary WordPress Options Removal vulnerabilityEPSS 0.3%