Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2024-4620

ArForms < 6.6 - Unauthenticated RCE

Description

The ARForms - Premium WordPress Form Builder Plugin WordPress plugin before 6.6 allows unauthenticated users to modify uploaded files in such a way that PHP code can be uploaded when an upload file input is included on a form

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown ARForms - Premium WordPress Form Builder Plugin

Default version status: unaffected

  • 0 to < 6.6affected

References