Skip to content
OpenAdvisories

Vendor

ARI Soft

9 known vulnerabilities.

Products

ARI Stream Quiz 2 ARI Fancy Lightbox 2 ARI Stream Quiz – WordPress Quizzes Builder 2 ARI Adminer – WordPress Database Manager 1 Contact Form 7 Connector 1 Contact Form 7 Editor Button 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2025-48345

    WordPress Contact Form 7 Editor Button plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in arisoft Contact Form 7 Editor Button cf7-editor-button allows Reflected XSS.This issue affects Contact Form 7 Editor Button: from n/a through <= 1.0.0.

    ARI Soft Contact Form 7 Editor Button
  • High 7.3
    CVE-2019-25215

    ARI-Adminer <= 1.1.14 - Missing Authorization and No Direct File Access Restrictions

    The ARI-Adminer plugin for WordPress is vulnerable to authorization bypass due to a lack of file access controls in nearly every file of the plugin in versions up to, and including, 1.1.14. This makes it possible for unauthenticated attackers to call the file…

    ARI Soft ARI Adminer – WordPress Database Manager Web / CMS