目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1336 CNY

100%
コーヒーを一杯おごる

Repute Infosystems 厂商漏洞列表 / CVE 中文分析 26

Repute Infosystems 厂商相关 26 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

Repute InfoSystems 主要提供企业级信息安全解决方案，涵盖数据泄露防护及合规性管理工具。其软件产品历史上曾暴露出多种漏洞，包括远程代码执行、跨站脚本及权限绕过等高风险类型，累计已收录 23 条 CVE。值得关注的是，部分版本存在配置不当导致的敏感信息泄露问题，建议用户及时更新补丁以修复已知缺陷，确保系统部署符合最新安全最佳实践。

上位製品 Repute Infosystems: ARMember ARForms Form Builder BookingPress BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup BookingPress Appointment Booking Pro ARMember (free) ARMember Premium ARForms
CVE IDタイトルCVSS深刻度公開日
CVE-2026-11823 BookingPress Appointment Booking Pro <= 5.7.1 - Unauthenticated SQL Injection via 'store_service_date' Parameter — BookingPress Appointment Booking ProCWE-89 7.5 High2026-07-01
CVE-2026-57338 WordPress ARForms plugin <= 7.1.2 - Reflected Cross Site Scripting (XSS) vulnerability — ARFormsCWE-79 7.1 High2026-06-29
CVE-2026-6960 BookingPress Pro <= 5.6 - Unauthenticated Arbitrary File Upload via Signature Custom Field — BookingPress Appointment Booking ProCWE-434 9.8 Critical2026-05-21
CVE-2022-47425 WordPress ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup plugin <= 3.4.10 - Broken Access Control — ARMemberCWE-862 4.3 Medium2025-12-09
CVE-2023-39994 WordPress ARMember Premium plugin <= 5.9.2 - Broken Access Control — ARMember PremiumCWE-862 4.3 Medium2025-01-02
CVE-2022-47424 WordPress ARMember plugin <= 4.0.5 - Cross Site Request Forgery (CSRF) — ARMemberCWE-352 5.4 Medium2024-11-19
CVE-2024-37920 WordPress ARForms Form Builder plugin <= 1.6.7 - Reflected Cross Site Scripting (XSS) vulnerability — ARForms Form BuilderCWE-79 7.1 High2024-07-20
CVE-2024-34799 WordPress BookingPress plugin <= 1.0.82 - Appointment Duration Manipulation vulnerability — BookingPressCWE-862 6.5 Medium2024-06-11
CVE-2023-47837 WordPress ARMember plugin <= 4.0.10 - Membership Plan Bypass vulnerability — ARMemberCWE-269 8.3 High2024-06-04
CVE-2023-51356 WordPress ARMember plugin <= 4.0.10 - Privilege Escalation vulnerability — ARMemberCWE-269 8.8 High2024-05-17
CVE-2024-31270 WordPress ARForms Form Builder plugin <= 1.6.1 - Broken Access Control vulnerability — ARForms Form BuilderCWE-862 7.6 High2024-05-08
CVE-2023-51405 WordPress BookingPress plugin <= 1.0.74 - Booking Price Manipulation vulnerability — BookingPressCWE-287 8.2 High2024-04-24
CVE-2024-32948 WordPress ARMember – Membership Plugin plugin <= 4.0.28 - Broken Access Control vulnerability — ARMemberCWE-862 9.1 Critical2024-04-24
CVE-2024-31272 WordPress ARForms Form Builder plugin <= 1.6.1 - Cross Site Request Forgery (CSRF) vulnerability — ARForms Form BuilderCWE-352 6.3 Medium2024-04-12
CVE-2024-31296 WordPress BookingPress plugin <= 1.0.81 - Insecure Direct Object References (IDOR) vulnerability — BookingPressCWE-639 4.3 Medium2024-04-07
CVE-2024-30222 WordPress ARMember plugin <= 4.0.26 - PHP Object Injection vulnerability — ARMemberCWE-502 8.5 High2024-03-28
CVE-2024-30223 WordPress ARMember plugin <= 4.0.26 - Unauthenticated PHP Object Injection vulnerability — ARMemberCWE-502 9.0 Critical2024-03-28
CVE-2024-27995 WordPress ARMember plugin <= 4.0.23 - Cross Site Scripting (XSS) vulnerability — ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signupCWE-79 5.9 Medium2024-03-21
CVE-2023-52200 WordPress ARMember Plugin <= 4.0.22 is vulnerable to Cross Site Request Forgery (CSRF) leading to PHP Object Injection — ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signupCWE-352 9.6 Critical2024-01-08
CVE-2023-50841 WordPress BookingPress Plugin <= 1.0.72 is vulnerable to SQL Injection — BookingPress – Appointment Booking Calendar Plugin and Online Scheduling PluginCWE-89 8.5 High2023-12-28
CVE-2023-36507 WordPress BookingPress Plugin <= 1.0.64 is vulnerable to Sensitive Data Exposure — BookingPress – Appointment Booking Calendar Plugin and Online Scheduling PluginCWE-200 5.3 Medium2023-11-30
CVE-2022-46808 WordPress ARMember Plugin <= 3.4.11 is vulnerable to SQL Injection — ARMemberCWE-89 8.2 High2023-11-03
CVE-2022-47421 WordPress ARMember (free) and ARMember (premium) plugins - vulnerable to Auth. Stored Cross Site Scripting (XSS) — ARMember (free)CWE-79 5.9 Medium2023-07-18
CVE-2023-33323 WordPress ARMember Plugin <= 4.0.2 is vulnerable to Cross Site Scripting (XSS) — ARMemberCWE-79 5.9 Medium2023-06-22
CVE-2022-47140 WordPress ARMember Plugin <= 4.0.1 is vulnerable to Cross Site Scripting (XSS) — ARMemberCWE-79 7.1 High2023-06-12
CVE-2022-45838 WordPress ARForms Form Builder Plugin <= 1.5.5 is vulnerable to Cross Site Scripting (XSS) — ARForms Form BuilderCWE-79 6.1 Medium2023-04-18

本页汇总了 Repute Infosystems 厂商截至目前公开的全部 26 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。