CVEs we hold for Repute
Records whose assigning authority named Repute as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-7649ARMember <= 4.0.60 - Unauthenticated SQL Injection via 'orderby' Parameterreputeinfosystems ARMember – Membership Plugin, Content…
CVE-2026-6960BookingPress Pro <= 5.6 - Unauthenticated Arbitrary File Upload via Signature Custom FieldRepute Infosystems BookingPress Appointment Booking Pro
CVE-2026-68566WordPress BookingPress Appointment Booking Pro plugin <= 6.0.2 - SQL Injection vulnerabilityRepute Infosystems BookingPress Appointment Booking Pro
CVE-2026-57338WordPress ARForms plugin <= 7.1.2 - Reflected Cross Site Scripting (XSS) vulnerabilityRepute InfoSystems ARForms
CVE-2026-27060WordPress ARMember Premium plugin < 7.6 - PHP Object Injection vulnerabilityRepute Infosystems ARMember Premium
CVE-2026-15302ARMember <= 4.0.27 - Directory Traversal via X-FILENAMEreputeinfosystems ARMember – Membership Plugin, Content…
CVE-2026-11823BookingPress Appointment Booking Pro <= 5.7.1 - Unauthenticated SQL Injection via 'store_service_date' ParameterRepute Infosystems BookingPress Appointment Booking Pro
CVE-2025-31911WordPress Social Share And Social Locker plugin <= 1.4.2 - SQL Injection vulnerabilityreputeinfosystems Social Share And Social Locker
CVE-2025-31910WordPress BookingPress plugin <= 1.1.28 - SQL Injection vulnerabilityreputeinfosystems BookingPress
CVE-2025-31902WordPress Social Share And Social Locker Plugin <= 1.4.1 - Reflected Cross Site Scripting (XSS) vulnerabilityreputeinfosystems Social Share And Social Locker
CVE-2025-26731WordPress ARPrice plugin <= 4.1.3 - Cross Site Scripting (XSS) vulnerabilityreputeinfosystems ARPrice
CVE-2025-24732WordPress BookingPress Plugin <= 1.1.25 - Cross Site Scripting (XSS) vulnerabilityreputeinfosystems BookingPress
CVE-2024-7703ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 4.0.37 - Authenticated…reputeinfosystems ARMember – Membership Plugin, Content…
CVE-2024-7350Appointment Booking Calendar Plugin and Online Scheduling Plugin – BookingPress 1.1.6 - 1.1.7 - Authentication Bypass…reputeinfosystems Appointment Booking Calendar Plugin and…
CVE-2024-6660BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin <= 1.1.5 - Missing Authorization to…reputeinfosystems Appointment Booking Calendar Plugin and…
CVE-2024-6467BookingPress Appointment Booking <= 1.1.5 - Authenticated (Subscriber+) Arbitrary File Read to Arbitrary File Creationreputeinfosystems Appointment Booking Calendar Plugin and…
CVE-2024-54223WordPress ARForms plugin <= 1.7.1 - HTML Injection vulnerabilityreputeinfosystems ARForms Form Builder
CVE-2024-54217WordPress ARForms plugin <= 6.4.1 - Subscriber+ Plugin Settings Change vulnerabilityreputeinfosystems ARForms
CVE-2024-54216WordPress ARForms plugin < 7.0.2 - Path Traversal vulnerabilityreputeinfosystems ARForms
CVE-2024-49700WordPress ARPrice plugin <= 4.1.3 - Reflected Cross Site Scripting (XSS) vulnerabilityreputeinfosystems ARPrice
CVE-2024-49699WordPress ARPrice plugin <= 4.1.3 - PHP Object Injection vulnerabilityreputeinfosystems ARPrice
CVE-2024-49688WordPress ARPrice plugin <= 4.1.3 - Unauthenticated PHP Object Injection vulnerabilityreputeinfosystems ARPrice
CVE-2024-49666WordPress ARPrice plugin <= 4.1.3 - SQL Injection vulnerabilityreputeinfosystems ARPrice
CVE-2024-49655WordPress ARPrice plugin <= 4.1.3 - Unauthenticated SQL Injection vulnerabilityreputeinfosystems ARPrice
CVE-2024-4133ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 4.0.30 - Open Redirectreputeinfosystems ARMember – Membership Plugin, Content…
CVE-2024-37920WordPress ARForms Form Builder plugin <= 1.6.7 - Reflected Cross Site Scripting (XSS) vulnerabilityRepute InfoSystems ARForms Form Builder
CVE-2024-34799WordPress BookingPress plugin <= 1.0.82 - Appointment Duration Manipulation vulnerabilityRepute Infosystems BookingPress
CVE-2024-32948WordPress ARMember – Membership Plugin plugin <= 4.0.28 - Broken Access Control vulnerabilityRepute Infosystems ARMember
CVE-2024-32706WordPress ARForms plugin <= 6.4 - Subscriber+ SQL Injection vulnerabilityreputeinfosystems ARForms
CVE-2024-32705WordPress ARForms plugin <= 6.4 - Subscriber+ Arbitrary Plugin Activation/Deactivation Vulnerabilityreputeinfosystems ARForms
CVE-2024-32704WordPress ARForms plugin <= 6.4 - Subscriber+ Arbitrary WordPress Options Removal vulnerabilityreputeinfosystems ARForms
CVE-2024-32703WordPress ARForms plugin <= 6.4 - Subscriber+ Arbitrary File Deletion vulnerabilityreputeinfosystems ARForms
CVE-2024-32702WordPress ARForms plugin <= 6.4 - Reflected Cross Site Scripting (XSS) vulnerabilityreputeinfosystems ARForms
CVE-2024-31296WordPress BookingPress plugin <= 1.0.81 - Insecure Direct Object References (IDOR) vulnerabilityRepute Infosystems BookingPress
CVE-2024-31272WordPress ARForms Form Builder plugin <= 1.6.1 - Cross Site Request Forgery (CSRF) vulnerabilityRepute InfoSystems ARForms Form Builder
CVE-2024-31270WordPress ARForms Form Builder plugin <= 1.6.1 - Broken Access Control vulnerabilityRepute InfoSystems ARForms Form Builder
CVE-2024-30223WordPress ARMember plugin <= 4.0.26 - Unauthenticated PHP Object Injection vulnerabilityRepute Infosystems ARMember
CVE-2024-30222WordPress ARMember plugin <= 4.0.26 - PHP Object Injection vulnerabilityRepute Infosystems ARMember
CVE-2024-3022BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin <= 1.0.87 - Authenticated (Admin+)…reputeinfosystems Appointment Booking Calendar Plugin and…
CVE-2024-27995WordPress ARMember plugin <= 4.0.23 - Cross Site Scripting (XSS) vulnerabilityRepute Infosystems ARMember – Membership Plugin, Content…
CVE-2024-1945ARForms Form Builder <= 1.6.4 - Missing Authorization to Authenticated(Subscriber+) Arbitrary Option Deletionreputeinfosystems Contact Form, Survey, Quiz & Popup Form…
CVE-2024-13785Contact Form, Survey, Quiz & Popup Form Builder – ARForms <= 1.7.2 - Unauthenticated Blind Arbitrary Shortcode Executionreputeinfosystems Contact Form, Survey, Quiz & Popup Form…
CVE-2024-13784Contact Form, Survey, Quiz & Popup Form Builder – ARForms <= 1.8.5 - Unauthenticated PHP Object Injectionreputeinfosystems Contact Form, Survey, Quiz & Popup Form…
CVE-2024-11726Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress <= 1.1.21 - Authenticated (Contributor+) SQL…reputeinfosystems Appointment Booking Calendar Plugin and…
CVE-2024-10681ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 4.0.51 - Authenticated…reputeinfosystems ARMember – Membership Plugin, Content…
CVE-2024-10540Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress <= 1.1.16 - Authenticated (Subscriber+) SQL…reputeinfosystems Appointment Booking Calendar Plugin and…
CVE-2024-0969ARMember <= 4.0.24 - Improper Access Control to Sensitive Information Exposure via REST APIreputeinfosystems ARMember – Membership Plugin, Content…
CVE-2023-6828ARForms <= 1.5.8 - Unauthenticated Stored Cross-Site Scripting via arf_http_referrer_urlreputeinfosystems Contact Form, Survey, Quiz & Popup Form…
CVE-2023-6219BookingPress <= 1.0.76 - Authenticated (Administrator+) Arbitrary File Uploadreputeinfosystems Appointment Booking Calendar Plugin and…
CVE-2023-52200WordPress ARMember Plugin <= 4.0.22 is vulnerable to Cross Site Request Forgery (CSRF) leading to PHP Object InjectionRepute Infosystems ARMember – Membership Plugin, Content…
CVE-2023-51405WordPress BookingPress plugin <= 1.0.74 - Booking Price Manipulation vulnerabilityRepute Infosystems BookingPress
CVE-2023-51356WordPress ARMember plugin <= 4.0.10 - Privilege Escalation vulnerabilityRepute Infosystems ARMember
CVE-2023-50841WordPress BookingPress Plugin <= 1.0.72 is vulnerable to SQL InjectionRepute Infosystems BookingPress – Appointment Booking…
CVE-2023-47837WordPress ARMember plugin <= 4.0.10 - Membership Plan Bypass vulnerabilityRepute Infosystems ARMember
CVE-2023-39994WordPress ARMember Premium plugin <= 5.9.2 - Broken Access ControlRepute InfoSystems ARMember Premium
CVE-2023-3996ARMember Lite - Membership Plugin <= 4.0.16 - Authenticated (Administrator+) Stored Cross-Site Scriptingreputeinfosystems ARMember – Membership Plugin, Content…
CVE-2023-36507WordPress BookingPress Plugin <= 1.0.64 is vulnerable to Sensitive Data ExposureRepute Infosystems BookingPress – Appointment Booking…
CVE-2023-33323WordPress ARMember Plugin <= 4.0.2 is vulnerable to Cross Site Scripting (XSS)Repute InfoSystems ARMember
CVE-2023-3011ARMember <= 4.0.5 - Cross-Site Request Forgeryreputeinfosystems ARMember – Membership Plugin, Content…
CVE-2022-47425WordPress ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup plugin <= 3.4.10…Repute Infosystems ARMember
CVE-2022-47424WordPress ARMember plugin <= 4.0.5 - Cross Site Request Forgery (CSRF)Repute InfoSystems ARMember Premium
CVE-2022-47421WordPress ARMember (free) and ARMember (premium) plugins - vulnerable to Auth. Stored Cross Site Scripting (XSS)Repute InfoSystems ARMember (premium)
CVE-2022-47140WordPress ARMember Plugin <= 4.0.1 is vulnerable to Cross Site Scripting (XSS)Repute InfoSystems ARMember
CVE-2022-46808WordPress ARMember Plugin <= 3.4.11 is vulnerable to SQL InjectionRepute Infosystems ARMember
CVE-2022-45838WordPress ARForms Form Builder Plugin <= 1.5.5 is vulnerable to Cross Site Scripting (XSS)Repute InfoSystems ARForms Form Builder
CVE-2022-42888WordPress ARMember Plugin <= 5.5.1 is vulnerable to Privilege EscalationReputeinfosystems ARMember
66 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.