EUVD-2026-38644
GHSA-74c3-6w2v-rcqg
Severity by source
AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Unauthenticated network injection (AV:N/AC:L/PR:N), but execution requires an admin to view the entries page (UI:R); scope changes to admin session with limited C/I impact.
Primary rating from Vendor (Wordfence).
CVSS VectorVendor: Wordfence
Lifecycle Timeline
2DescriptionCVE.org
The ARForms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the value parameter of the arf_save_incomplete_form_data AJAX action in all versions up to, and including, 7.1.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts that will execute whenever an administrator views the "Partial Filled Form Entries" page in the ARForms dashboard.
Articles & Coverage 1
AnalysisAI
Stored cross-site scripting in the ARForms WordPress plugin (versions ≤7.1.3) allows unauthenticated remote attackers to inject arbitrary JavaScript via the value parameter of the arf_save_incomplete_form_data AJAX endpoint, with the payload executing in an administrator's browser when they view the Partial Filled Form Entries dashboard page. No public exploit identified at time of analysis, though Wordfence's disclosure provides enough technical detail to reproduce the injection. Successful exploitation typically leads to admin account takeover and full WordPress site compromise.
Technical ContextAI
ARForms is a commercial drag-and-drop form-builder plugin for WordPress distributed via Envato CodeCanyon. The flaw is a textbook CWE-79 (Improper Neutralization of Input During Web Page Generation) in the partial-form-save feature: the arf_save_incomplete_form_data AJAX action accepts a value parameter from anonymous visitors and persists it without sanitization (e.g., sanitize_text_field/wp_kses), and then renders it without output escaping (e.g., esc_html/esc_attr) on the administrative Partial Filled Form Entries listing. The CPE cpe:2.3:a:n/a:arforms:*:*:*:*:*:*:*:* covers all plugin versions through 7.1.3.
RemediationAI
No vendor-released patch identified at time of analysis - the references include only the Wordfence advisory and the CodeCanyon product page, with no fixed-version designation. Site operators should monitor the CodeCanyon listing and the Wordfence advisory (https://www.wordfence.com/threat-intel/vulnerabilities/id/b6ca5856-9010-4bb3-a024-92b3b4d500b4) for an update past 7.1.3 and upgrade as soon as one is published. Until a fix ships, compensating controls include blocking the arf_save_incomplete_form_data AJAX action at the WAF/edge (e.g., a ModSecurity or Wordfence rule matching action=arf_save_incomplete_form_data with HTML/JS metacharacters in value), disabling the partial-entry feature in ARForms settings if not required (loses incomplete-submission recovery), restricting access to /wp-admin/admin-ajax.php for the affected action by IP allowlist where feasible, and instructing administrators to avoid the Partial Filled Form Entries page until patched. Enabling Wordfence's premium ruleset will likely add virtual-patch coverage automatically.
LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutContr
Reachable assertion in Open5GS up to version 2.7.6 allows remote unauthenticated attackers to crash the Diameter CER han
A Command Injection issue in the payload build page in BYOB (Build Your Own Botnet) 2.0 allows attackers to execute arbi
Denial of service in Open5GS 2.7.6 and earlier allows network-adjacent attackers with low-privilege Diameter Gx peer acc
Denial of service in Open5GS HSS (Home Subscriber Server) versions 2.7.0 through 2.7.6 is triggered remotely by manipula
Remote command injection in Control Web Panel allows unauthenticated attackers to execute arbitrary OS commands as root
LINQPad before 5.52.01 Pro edition is vulnerable to Unsafe Deserialization in LINQPad.AutoRefManager::PopulateFromCache(
Remote code execution in dash-uploader (Python package for Plotly Dash) versions 0.1.0 through 0.7.0a2 allows unauthenti
Command injection in LiteLLM 1.18.10 lets attackers who can configure MCP (Model Context Protocol) servers supply arbitr
SQL injection in AzuraCast's backup restore flow (versions up to and including 0.23.7) lets an attacker achieve privileg
Arbitrary file read in Yu AI Code Mother v4.3 lets anonymous, remote attackers retrieve files outside the intended previ
Remote code execution in APScheduler (all versions through 3.10.x and 4.0.0a5) is achievable when applications deseriali
Same weakness CWE-79 – Cross-site Scripting (XSS)
View allShare
External POC / Exploit Code
Leaving vuln.today