All 3 CVE vulnerabilities found in Contact Form, Survey, Quiz & Popup Form Builder – ARForms, with AI-generated Chinese analysis, references, and POCs.
Vendor: reputeinfosystems
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2024-13785 | Contact Form, Survey, Quiz & Popup Form Builder – ARForms <= 1.7.2 - Unauthenticated Blind Arbitrary Shortcode Execution CWE-94 | 5.6 | Medium | 2026-03-21 |
| CVE-2024-1945 | ARForms Form Builder <= 1.6.4 - Missing Authorization to Authenticated(Subscriber+) Arbitrary Option Deletion CWE-862 | 7.1 | High | 2024-05-02 |
| CVE-2023-6828 | ARForms <= 1.5.8 - Unauthenticated Stored Cross-Site Scripting via arf_http_referrer_url CWE-79 | 7.2 | High | 2024-01-11 |
All 3 known CVE vulnerabilities affecting Contact Form, Survey, Quiz & Popup Form Builder – ARForms with full Chinese analysis, references, and POCs where available.