Skip to content
OpenAdvisories

Vendor

Repute InfoSystems

69 known vulnerabilities.

Products

ARMember 11 ARForms 10 ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup 10 Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress 7 ARPrice 6 BookingPress 5 ARForms Form Builder 5 ARMember Premium 5 Contact Form, Survey, Quiz & Popup Form Builder – ARForms 4 BookingPress Appointment Booking Pro 3 Social Share And Social Locker 2 BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin 2 ARMember (free) 1
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-42417

    WordPress ARMember Premium plugin <= 7.8 - SQL Injection vulnerability

    Unauthenticated SQL Injection in ARMember Premium <= 7.8 versions.

    Repute InfoSystems ARMember Premium
  • Critical 9.3
    CVE-2026-68566

    WordPress BookingPress Appointment Booking Pro plugin <= 6.0.2 - SQL Injection vulnerability

    Unauthenticated SQL Injection in BookingPress Appointment Booking Pro <= 6.0.2 versions.

    Repute InfoSystems BookingPress Appointment Booking Pro
  • Critical 9.8
    CVE-2024-13784

    Contact Form, Survey, Quiz & Popup Form Builder – ARForms <= 1.8.5 - Unauthenticated PHP Object Injection

    The Contact Form, Survey, Quiz & Popup Form Builder – ARForms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.8.5 via deserialization of untrusted input from form submissions. This makes it possible for unaut…

    Repute InfoSystems Contact Form, Survey, Quiz & Popup Form Builder – ARForms Web / CMS
  • Critical 9.8
    CVE-2026-6960

    BookingPress Pro <= 5.6 - Unauthenticated Arbitrary File Upload via Signature Custom Field

    The BookingPress Pro plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'bookingpress_validate_submitted_booking_form_func' function in all versions up to, and including, 5.6. This makes it possible for una…

    Repute InfoSystems BookingPress Appointment Booking Pro Web / CMS
  • Critical 9.3
    CVE-2025-31911

    WordPress Social Share And Social Locker plugin <= 1.4.2 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in reputeinfosystems Social Share And Social Locker social-share-and-social-locker-arsocial allows Blind SQL Injection.This issue affects Social Share And Socia…

    Repute InfoSystems Social Share And Social Locker
  • Critical 9.8
    CVE-2024-49688

    WordPress ARPrice plugin <= 4.1.3 - Unauthenticated PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in reputeinfosystems ARPrice arprice allows Object Injection.This issue affects ARPrice: from n/a through <= 4.1.3.

    Repute InfoSystems ARPrice
  • Critical 9.3
    CVE-2024-49655

    WordPress ARPrice plugin <= 4.1.3 - Unauthenticated SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in reputeinfosystems ARPrice arprice allows SQL Injection.This issue affects ARPrice: from n/a through <= 4.1.3.

    Repute InfoSystems ARPrice
  • Critical 9.8
    CVE-2024-7350

    Appointment Booking Calendar Plugin and Online Scheduling Plugin – BookingPress 1.1.6 - 1.1.7 - Authentication Bypass to Account Takeover

    The Appointment Booking Calendar Plugin and Online Scheduling Plugin – BookingPress plugin for WordPress is vulnerable to authentication bypass in versions 1.1.6 to 1.1.7. This is due to the plugin not properly verifying a user's identity prior to logging the…

    Repute InfoSystems Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress Web / CMS
  • Critical 9.1
    CVE-2024-32948

    WordPress ARMember – Membership Plugin plugin <= 4.0.28 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Repute Infosystems ARMember.This issue affects ARMember: from n/a through 4.0.28.

    Repute InfoSystems ARMember
  • Critical 9.0
    CVE-2024-30223

    WordPress ARMember plugin <= 4.0.26 - Unauthenticated PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in Repute Infosystems ARMember.This issue affects ARMember: from n/a through 4.0.26.

    Repute InfoSystems ARMember
  • Critical 9.6
    CVE-2023-52200

    WordPress ARMember Plugin <= 4.0.22 is vulnerable to Cross Site Request Forgery (CSRF) leading to PHP Object Injection

    Cross-Site Request Forgery (CSRF), Deserialization of Untrusted Data vulnerability in Repute Infosystems ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup.This issue affects ARMember – Membership Plugin, Content Rest…

    Repute InfoSystems ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup
  • Critical 9.8
    CVE-2022-42888

    WordPress ARMember Plugin <= 5.5.1 is vulnerable to Privilege Escalation

    Unauth. Privilege Escalation vulnerability in ARMember premium plugin <= 5.5.1 on WordPress.

    Repute InfoSystems ARMember