Skip to content
OpenAdvisories

Vendor

arisoft

4 known vulnerabilities.

Products

ARI Fancy Lightbox 2 ARI Adminer – WordPress Database Manager 1 Contact Form 7 Editor Button 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2025-48345

    WordPress Contact Form 7 Editor Button plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in arisoft Contact Form 7 Editor Button cf7-editor-button allows Reflected XSS.This issue affects Contact Form 7 Editor Button: from n/a through <= 1.0.0.

    arisoft Contact Form 7 Editor Button
  • High 7.3
    CVE-2019-25215

    ARI-Adminer <= 1.1.14 - Missing Authorization and No Direct File Access Restrictions

    The ARI-Adminer plugin for WordPress is vulnerable to authorization bypass due to a lack of file access controls in nearly every file of the plugin in versions up to, and including, 1.1.14. This makes it possible for unauthenticated attackers to call the file…

    arisoft ARI Adminer – WordPress Database Manager Web / CMS