Ari-Soft
3 CVEs across 4 Ari-Soft products. Browse Ari-Soft vulnerabilities, severities, and proof-of-concept exploits.
Ari-Soft products with known CVEs
Ari-Soft CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2019-25215 | High | 7.3 | 2024-10-16 | The ARI-Adminer plugin for WordPress is vulnerable to authorization bypass due to a lack of file access controls in nearly every file of the plugin in versions… |
CVE-2023-51487 | Medium | 5.4 | 2024-03-16 | Cross-Site Request Forgery (CSRF) vulnerability in ARI Soft ARI Stream Quiz.This issue affects ARI Stream Quiz: from n/a through 1.2.32. |
CVE-2024-24884 | Medium | 4.3 | 2024-02-12 | Cross-Site Request Forgery (CSRF) vulnerability in ARI Soft Contact Form 7 Connector.This issue affects Contact Form 7 Connector: from n/a through 1.2.2. |
CVE-2024-0239 | Medium | 6.1 | 2024-01-16 | The Contact Form 7 Connector WordPress plugin before 1.2.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflect… |
CVE-2023-52182 | Critical | 9.9 | 2023-12-31 | Deserialization of Untrusted Data vulnerability in ARI Soft ARI Stream Quiz – WordPress Quizzes Builder.This issue affects ARI Stream Quiz – WordPress Quizzes… |
CVE-2023-47835 | Medium | 6.5 | 2023-11-23 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ARI Soft ARI Stream Quiz – WordPress Quizzes Builder plug… |
CVE-2022-0161 | Medium | 6.1 | 2022-03-14 | The ARI Fancy Lightbox WordPress plugin before 1.3.9 does not sanitise and escape the msg parameter before outputting it back in an admin page, leading to a Re… |
CVE-2020-19156 | Medium | 5.4 | 2021-09-15 | Cross Site Scripting (XSS) in Ari Adminer v1 allows remote attackers to execute arbitrary code via the 'Title' parameter of the 'Add New Connections' component… |