Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 27
Reset filtersContact Form, Survey, Quiz & Popup Form Builder – ARForms <= 1.8.5 - Unauthenticated PHP Object Injection
ARforms <= 7.2.1 - Unauthenticated Stored Cross-Site Scripting via 'password' Field Values
ARforms <= 7.1.2 - Reflected Cross-Site Scripting
ARForms <= 7.1.1 - Unauthenticated Stored Cross-Site Scripting via 'value' Parameter
Contact Form, Survey, Quiz & Popup Form Builder – ARForms <= 1.7.4 - Unauthenticated Blind Arbitrary Shortcode Execution
Contact Form, Survey, Quiz & Popup Form Builder – ARForms <= 1.7.0 - Unauthenticated Stored Cross-Site Scripting
ARForms Form Builder <= 1.7.1 - HTML Injection
ARForms <= 6.4.1 - Missing Authorization to Plugin Settings Change
ARForms <= 6.4.1 - Directory Traversal to Authenticated (Subscriber+) Arbitrary File Read
ARForms Form Builder <= 1.6.7 - Reflected Cross-Site Scripting
ARForms - Premium WordPress Form Builder <= 6.4.0 - Reflected Cross-Site Scripting
ARforms <= 6.5 - Authenticated (Admin+) Stored Cross-Site Scripting
ARForms Form Builder <= 6.5 - Unauthenticated Arbitrary File Upload
ARForms Form Builder <= 1.6.4 - Missing Authorization to Authenticated(Subscriber+) Arbitrary Option Deletion
ARForms <= 6.4 - Missing Authorization to Arbitrary Plugin Activation/Deactivation
ARforms <= 6.4 - Reflected Cross-Site Scripting
ARforms <= 6.4 - Authenticated (Subscriber+) SQL Injection
ARForms <= 6.4 - Missing Authorization to Arbitrary Option Deletion
ARForms <= 6.4 - Missing Authorization to Arbitrary File Deletion
ARForms Form Builder <= 1.6.1 - Missing Authorization
ARForms Form Builder <= 1.6.1 - Cross-Site Request Forgery
ARForms <= 1.5.8 - Unauthenticated Stored Cross-Site Scripting via arf_http_referrer_url
ARForms Form Builder <= 1.5.6 - Unauthenticated Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.