Skip to content
Noroxi

reputeinfosystems records

52 published records for vendor reputeinfosystems.

Researcher profile

Entered KEV
0 · 0%
Weaponized
1 · 1.9%
Pre-auth RCE
2
With a fix record
67.3%
Median publish → KEV
No record has entered KEV

Records by year

  1. 19
  2. 21
  3. 22
  4. 23
  5. 24
  6. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

52 records
  • CVE-2022-0739
    60This week

    BookingPress < 1.0.11 - Unauthenticated SQL Injection

    CriticalCVSS 9.8WeaponizedEPSS 37%

    reputeinfosystems · bookingpressMar 21, 2022

  • CVE-2022-0867
    43Plan

    ARPrice Lite < 3.6.1 - Unauthenticated SQLi

    CriticalCVSS 9.8Proof of conceptEPSS 13%

    reputeinfosystems · pricing tableMay 16, 2022

  • CVE-2024-4620
    40Plan

    ArForms < 6.6 - Unauthenticated RCE

    CriticalCVSS 9.8Proof of conceptEPSS 3%

    reputeinfosystems · arformsJun 7, 2024

  • CVE-2024-7350
    39Monitor

    Appointment Booking Calendar Plugin and Online Scheduling Plugin – BookingPress 1.1.6 - 1.1.7 - Authentication Bypass to Account Takeover

    CriticalCVSS 9.8No exploitEPSS 0%

    reputeinfosystems · appointment booking calendar plugin and scheduling plugin – bookingpressAug 7, 2024

  • CVE-2023-51405
    39Monitor

    WordPress BookingPress plugin <= 1.0.74 - Booking Price Manipulation vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    reputeinfosystems · bookingpressApr 24, 2024

  • CVE-2024-30223
    39Monitor

    WordPress ARMember plugin <= 4.0.26 - Unauthenticated PHP Object Injection vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    reputeinfosystems · armemberMar 28, 2024

  • CVE-2022-46808
    39Monitor

    WordPress ARMember Plugin <= 3.4.11 is vulnerable to SQL Injection

    CriticalCVSS 9.8No exploitEPSS 0%

    reputeinfosystems · armemberNov 3, 2023

  • CVE-2023-52200
    39Monitor

    WordPress ARMember Plugin <= 4.0.22 is vulnerable to Cross Site Request Forgery (CSRF) leading to PHP Object Injection

    CriticalCVSS 9.8No exploitEPSS 0%

    reputeinfosystems · armemberJan 8, 2024

  • CVE-2024-32948
    36Monitor

    WordPress ARMember – Membership Plugin plugin <= 4.0.28 - Broken Access Control vulnerability

    CriticalCVSS 9.1No exploitEPSS 0%

    reputeinfosystems · armemberApr 24, 2024

  • CVE-2024-6467
    35Monitor

    BookingPress Appointment Booking <= 1.1.5 - Authenticated (Subscriber+) Arbitrary File Read to Arbitrary File Creation

    HighCVSS 8.8No exploitEPSS 0%

    reputeinfosystems · bookingpressJul 17, 2024

  • CVE-2024-6660
    35Monitor

    BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin <= 1.1.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Option

    HighCVSS 8.8No exploitEPSS 0%

    reputeinfosystems · bookingpressJul 17, 2024

  • CVE-2024-30222
    35Monitor

    WordPress ARMember plugin <= 4.0.26 - PHP Object Injection vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    reputeinfosystems · armemberMar 28, 2024

  • CVE-2024-32706
    35Monitor

    WordPress ARForms plugin <= 6.4 - Subscriber+ SQL Injection vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    reputeinfosystems · arformsApr 24, 2024

  • CVE-2023-51356
    35Monitor

    WordPress ARMember plugin <= 4.0.10 - Privilege Escalation vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    reputeinfosystems · armemberMay 17, 2024

  • CVE-2023-50841
    35Monitor

    WordPress BookingPress Plugin <= 1.0.72 is vulnerable to SQL Injection

    HighCVSS 8.8No exploitEPSS 0%

    reputeinfosystems · bookingpressDec 28, 2023

  • CVE-2023-47837
    35Monitor

    WordPress ARMember plugin <= 4.0.10 - Membership Plan Bypass vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    reputeinfosystems · armemberJun 4, 2024

  • CVE-2024-32705
    35Monitor

    WordPress ARForms plugin <= 6.4 - Subscriber+ Arbitrary Plugin Activation/Deactivation Vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    reputeinfosystems · arformsJun 9, 2024

  • CVE-2022-47425
    35Monitor

    WordPress ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup plugin <= 3.4.10 - Broken Access Control

    HighCVSS 8.8No exploitEPSS 0%

    reputeinfosystems · armemberDec 9, 2025

  • CVE-2022-47424
    35Monitor

    WordPress ARMember plugin <= 4.0.5 - Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    reputeinfosystems · armemberNov 19, 2024

  • CVE-2019-16902
    33Monitor

    In the ARforms plugin 3.7.1 for WordPress, arf_delete_file in arformcontroller.php allows unauthenticated deletion of an arbitrary file by s

    HighCVSS 7.5Proof of conceptEPSS 9%

    reputeinfosystems · arformsSep 27, 2019

  • CVE-2024-32703
    32Monitor

    WordPress ARForms plugin <= 6.4 - Subscriber+ Arbitrary File Deletion vulnerability

    HighCVSS 8.1No exploitEPSS 0%

    reputeinfosystems · arformsJun 9, 2024

  • CVE-2024-31270
    32Monitor

    WordPress ARForms Form Builder plugin <= 1.6.1 - Broken Access Control vulnerability

    HighCVSS 8.0No exploitEPSS 0%

    reputeinfosystems · arforms form builderMay 8, 2024

  • CVE-2018-15818
    31Monitor

    An issue was discovered in Repute ARForms 3.5.1 and prior.

    HighCVSS 7.5No exploitEPSS 2%

    reputeinfosystems · repute arformsMar 21, 2019

  • CVE-2024-54216
    30Monitor

    WordPress ARForms plugin < 7.0.2 - Path Traversal vulnerability

    HighCVSS 7.7No exploitEPSS 0%

    reputeinfosystems · arformsDec 6, 2024

  • CVE-2025-31910
    30Monitor

    WordPress BookingPress plugin <= 1.1.28 - SQL Injection vulnerability

    HighCVSS 7.6No exploitEPSS 0%

    reputeinfosystems · bookingpressApr 1, 2025