Repute Infosystems vulnerabilities
28 vulnerabilities
Known vulnerabilities in Repute Infosystems products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 9 products.
Products
9- Armember10 vulnerabilities
- Arforms Form Builder4 vulnerabilities
- Armember Premium4 vulnerabilities
- Bookingpress3 vulnerabilities
- Bookingpress Appointment Booking Pro3 vulnerabilities
- Armember – Membership Plugin, Content Restriction, Member Levels, User Profile & User Signup2 vulnerabilities
- Bookingpress – Appointment Booking Calendar Plugin And Online Scheduling Plugin2 vulnerabilities
- Arforms1 vulnerabilities
- Armember (Free)1 vulnerabilities
CVE-2022-47421armemberpluginarmember+3
EPSS score0.39%
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Repute InfoSystems ARMember (free), Repute InfoSystems ARMember (premium) plugins.CVE-2022-47140repute infosystemsarmember+2EPSS score0.38%
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Repute InfoSystems ARMember plugin <= 4.0.1 versions.CVE-2022-47425repute infosystemsarmember+2EPSS score0.29%
Missing Authorization vulnerability in Repute Infosystems ARMember allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ARMember: from n/a through 3.4.10.CVE-2022-47424repute infosystemsarmember+3EPSS score0.23%
Cross-Site Request Forgery (CSRF) vulnerability in Repute InfoSystems ARMember, Repute InfoSystems ARMember Premium allows Cross-Site Request Forgery.This issue affects ARMember: from n/a through 4.0.5; ARMember Premium: from n/a before 6.7.1.CVE-2022-46808repute infosystemsarmember+2EPSS score0.64%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Repute Infosystems ARMember armember-membership allows SQL Injection.This issue affects ARMember: from n/a through 3.4.11.CVE-2022-45838repute infosystemsarforms form builder+2EPSS score0.41%
Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Repute InfoSystems ARForms Form Builder plugin <= 1.5.5 versions.CVE-2024-31270repute infosystemsarforms form builder+2EPSS score0.36%
Missing Authorization vulnerability in Repute InfoSystems ARForms Form Builder.This issue affects ARForms Form Builder: from n/a through 1.6.1.CVE-2024-31272repute infosystemsarforms form builder+2EPSS score0.18%
Cross-Site Request Forgery (CSRF) vulnerability in Repute InfoSystems ARForms Form Builder.This issue affects ARForms Form Builder: from n/a through 1.6.1.CVE-2024-31296repute infosystemsbookingpress+2EPSS score0.32%
Authorization Bypass Through User-Controlled Key vulnerability in Repute Infosystems BookingPress.This issue affects BookingPress: from n/a through 1.0.81.CVE-2024-37920repute infosystemsarforms form builder+2EPSS score0.33%
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Repute InfoSystems ARForms Form Builder allows Reflected XSS.This issue affects ARForms Form Builder: from n/a through 1.6.7.CVE-2024-27995repute infosystemsarmember – membership plugin, content restriction, member levels, user profile & user signup+2EPSS score0.33%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Repute Infosystems ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup allows Stored XSS.This issue affects ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup: from n/a through 4.0.23.CVE-2024-32948repute infosystemsarmember+2EPSS score0.57%
Missing Authorization vulnerability in Repute Infosystems ARMember.This issue affects ARMember: from n/a through 4.0.28.CVE-2024-30223repute infosystemsarmember+2EPSS score0.65%
Deserialization of Untrusted Data vulnerability in Repute Infosystems ARMember.This issue affects ARMember: from n/a through 4.0.26.CVE-2024-30222repute infosystemsarmember+2EPSS score0.61%
Deserialization of Untrusted Data vulnerability in Repute Infosystems ARMember.This issue affects ARMember: from n/a through 4.0.26.CVE-2024-34799repute infosystemsbookingpress+2EPSS score0.37%
Missing Authorization vulnerability in Repute Infosystems BookingPress.This issue affects BookingPress: from n/a through 1.0.82.CVE-2026-11823repute infosystemsbookingpress appointment booking pro+1EPSS score0.46%
The BookingPress Appointment Booking Pro plugin for WordPress is vulnerable to SQL Injection via the 'store_service_date' parameter of the bpa_assign_staffmember_to_slots() function in versions up to and including 5.7.1. This is due to the explicit use of stripslashes_deep() on user-supplied POST data before it is interpolated verbatim into a SQL LIKE clause without use of $wpdb->prepare() or any parameterization. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.CVE-2026-68566repute infosystemsbookingpress appointment booking pro+1EPSS score0.40%
Unauthenticated SQL Injection in BookingPress Appointment Booking Pro <= 6.0.2 versions.CVE-2026-27060repute infosystemsarmember premium+1EPSS score0.52%
Deserialization of Untrusted Data vulnerability in Repute Infosystems ARMember Premium allows Object Injection.
This issue affects ARMember Premium: from n/a before 7.6.CVE-2026-57338repute infosystemsarforms+1EPSS score0.25%
Unauthenticated Cross Site Scripting (XSS) in ARForms <= 7.1.2 versions.CVE-2026-6960repute infosystemsbookingpress appointment booking pro+1EPSS score0.87%
The BookingPress Pro plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'bookingpress_validate_submitted_booking_form_func' function in all versions up to, and including, 5.6. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. Note: The vulnerability can only be exploited if a signature custom field is added to the booking form.