Skip to content
Noroxi

ARForms Form Builder

arforms-form-builder · plugin

Known security vulnerabilities for ARForms Form Builder. Find out in seconds which version runs on your site with WP Lens.

9 known vulnerabilities

1 critical · latest Aug 16, 2026

Vulnerabilities

  • CVE-2024-13784

    Contact Form, Survey, Quiz & Popup Form Builder – ARForms <= 1.8.5 - Unauthenticated PHP Object Injection

    Critical 9.8

  • CVE-2024-31270

    WordPress ARForms Form Builder plugin <= 1.6.1 - Broken Access Control vulnerability

    High 8.0

  • CVE-2024-1945

    ARForms Form Builder <= 1.6.4 - Missing Authorization to Authenticated(Subscriber+) Arbitrary Option Deletion

    High 7.1

  • CVE-2024-31272

    WordPress ARForms Form Builder plugin <= 1.6.1 - Cross Site Request Forgery (CSRF) vulnerability

    Medium 6.3

  • CVE-2024-54223

    WordPress ARForms plugin <= 1.7.1 - HTML Injection vulnerability

    Medium 6.1

  • CVE-2024-37920

    WordPress ARForms Form Builder plugin <= 1.6.7 - Reflected Cross Site Scripting (XSS) vulnerability

    Medium 6.1

  • CVE-2023-6828

    ARForms <= 1.5.8 - Unauthenticated Stored Cross-Site Scripting via arf_http_referrer_url

    Medium 6.1

  • CVE-2022-45838

    WordPress ARForms Form Builder Plugin <= 1.5.5 is vulnerable to Cross Site Scripting (XSS)

    Medium 6.1

  • CVE-2024-13785

    Contact Form, Survey, Quiz & Popup Form Builder – ARForms <= 1.7.2 - Unauthenticated Blind Arbitrary Shortcode Execution

    Medium 5.6

← Back to directory