EUVD-2026-47937
GHSA-359c-qmw4-f7gf
Severity by source
AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Unauthenticated remote injection (PR:N, AV:N, AC:L) with cross-context script execution (S:C, C:L/I:L), but UI:R because a victim must load the injected page for the stored payload to fire.
Primary rating from Vendor (Wordfence).
CVSS VectorVendor: Wordfence
Lifecycle Timeline
2DescriptionCVE.org
The ARforms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'password' Field Values in all versions up to, and including, 7.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
AnalysisAI
Stored cross-site scripting in the ARforms WordPress form-builder plugin (all versions through 7.2.1) lets unauthenticated attackers persist arbitrary JavaScript through submitted 'password' field values, which later executes in the browser of any user who loads the affected page. Because the injection point is a public-facing form and no authentication is required, the flaw is well-suited to opportunistic, automated abuse against WordPress sites running the plugin. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the CVSS 7.2 (scope-changed) rating and unauthenticated vector make it a meaningful patch priority.
Technical ContextAI
ARforms is a commercial drag-and-drop form-builder plugin for WordPress used to create contact, registration, and login-style forms. The root cause is CWE-79 (Improper Neutralization of Input During Web Page Generation): user-supplied values for form 'password' fields are stored without sufficient input sanitization and rendered back without adequate output escaping. The referenced source location, arrecordhelper.php around line 704 (the record/entry helper that assembles stored submissions for display), is where submitted field values are handled, so the payload is persisted server-side and reflected into HTML - typically when submissions are rendered in an entry/preview context. The single CPE provided, cpe:2.3:a:n/a:arforms:*:*:*:*:*:*:*:*, is unbounded on version and confirms only the product family, consistent with the 'all versions up to and including 7.2.1' statement.
RemediationAI
No vendor-released patch version was identified in the provided data, so update ARforms to the latest available release above 7.2.1 as soon as the vendor publishes a fix, and consult the Wordfence advisory (https://www.wordfence.com/threat-intel/vulnerabilities/id/19e48549-8a28-4626-b0b5-b781cd01fa5b?source=cve) for the confirmed patched version before assuming remediation. As interim compensating controls: deploy a WAF or the Wordfence firewall with XSS rules to filter script payloads in form submissions (trade-off: rule-based filtering can be bypassed and may block legitimate special characters); restrict or disable any ARforms forms that expose a password field, or remove password fields from public forms where not essential (trade-off: reduces form functionality); and limit who can view stored form entries in wp-admin to reduce the chance a payload fires in a privileged session (trade-off: operational overhead for teams that triage submissions). Avoid inventing a fix version - cite only the version the vendor advisory confirms.
LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutContr
Reachable assertion in Open5GS up to version 2.7.6 allows remote unauthenticated attackers to crash the Diameter CER han
A Command Injection issue in the payload build page in BYOB (Build Your Own Botnet) 2.0 allows attackers to execute arbi
Denial of service in Open5GS 2.7.6 and earlier allows network-adjacent attackers with low-privilege Diameter Gx peer acc
Denial of service in Open5GS HSS (Home Subscriber Server) versions 2.7.0 through 2.7.6 is triggered remotely by manipula
Remote command injection in Control Web Panel allows unauthenticated attackers to execute arbitrary OS commands as root
LINQPad before 5.52.01 Pro edition is vulnerable to Unsafe Deserialization in LINQPad.AutoRefManager::PopulateFromCache(
Remote code execution in dash-uploader (Python package for Plotly Dash) versions 0.1.0 through 0.7.0a2 allows unauthenti
Command injection in LiteLLM 1.18.10 lets attackers who can configure MCP (Model Context Protocol) servers supply arbitr
SQL injection in AzuraCast's backup restore flow (versions up to and including 0.23.7) lets an attacker achieve privileg
Arbitrary file read in Yu AI Code Mother v4.3 lets anonymous, remote attackers retrieve files outside the intended previ
Remote code execution in APScheduler (all versions through 3.10.x and 4.0.0a5) is achievable when applications deseriali
Same weakness CWE-79 – Cross-site Scripting (XSS)
View allShare
External POC / Exploit Code
Leaving vuln.today