Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Reputeinfosystems — Vulnerabilities & Security Advisories 40

Browse all 40 CVE security advisories affecting Reputeinfosystems. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Reputeinfosystems operates as a provider of enterprise software solutions, primarily focusing on identity and access management platforms. An analysis of its public vulnerability history reveals a concerning pattern of thirty-six recorded Common Vulnerabilities and Exposures (CVEs). These security flaws predominantly stem from inadequate input validation and improper access controls, resulting in frequent instances of Remote Code Execution (RCE) and Cross-Site Scripting (XSS). Additionally, several entries highlight critical privilege escalation risks, allowing unauthorized users to gain administrative rights within the system. While specific major public breaches are not widely documented in open sources, the high volume of RCE vulnerabilities suggests systemic weaknesses in the software’s security architecture. This track record indicates that Reputeinfosystems products have historically struggled with fundamental secure coding practices, posing significant risks to organizations relying on their identity management infrastructure without rigorous patching and network segmentation.

CVE ID Title CVSS Severity Published
CVE-2024-1945 ARForms Form Builder <= 1.6.4 - Missing Authorization to Authenticated(Subscriber+) Arbitrary Option Deletion — Contact Form, Survey, Quiz & Popup Form Builder – ARForms CWE-862 7.1 High 2024-05-02
CVE-2024-32702 WordPress ARForms plugin <= 6.4 - Reflected Cross Site Scripting (XSS) vulnerability — ARForms CWE-79 7.1 High 2024-04-24
CVE-2024-32706 WordPress ARForms plugin <= 6.4 - Subscriber+ SQL Injection vulnerability — ARForms CWE-89 8.5 High 2024-04-24
CVE-2024-3022 BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin <= 1.0.87 - Authenticated (Admin+) Arbitrary File Upload — Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress CWE-434 7.2 High 2024-04-04
CVE-2024-0969 ARMember <= 4.0.24 - Improper Access Control to Sensitive Information Exposure via REST API — ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup CWE-284 5.3 Medium 2024-02-05
CVE-2023-6828 ARForms <= 1.5.8 - Unauthenticated Stored Cross-Site Scripting via arf_http_referrer_url — Contact Form, Survey, Quiz & Popup Form Builder – ARForms CWE-79 7.2 High 2024-01-11
CVE-2023-6219 BookingPress <= 1.0.76 - Authenticated (Administrator+) Arbitrary File Upload — Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress CWE-434 7.2 High 2023-11-28
CVE-2023-3996 ARMember Lite - Membership Plugin <= 4.0.16 - Authenticated (Administrator+) Stored Cross-Site Scripting — ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup CWE-79 4.4 Medium 2023-10-20
CVE-2023-3011 ARMember <= 4.0.5 - Cross-Site Request Forgery — ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup CWE-352 6.5 Medium 2023-07-12
CVE-2022-42888 WordPress ARMember Plugin <= 5.5.1 is vulnerable to Privilege Escalation — ARMember CWE-269 9.8 Critical 2022-12-06

This page lists every published CVE security advisory associated with Reputeinfosystems. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.