Reputeinfosystems develops a focused suite of WordPress plugins and extensions, including ARMember, BookingPress, ARForms, and ARPrice Lite, that extend functionality for membership management, booking, form handling, and pricing—products widely deployed across WordPress installations. Despite the narrow product count, this vendor's vulnerabilities achieve a moderate prominence in the landscape, reflecting the ubiquity of WordPress and the plugin ecosystem's broad adoption. The exposure skews toward serious outcomes, with an elevated share reaching critical severity, and recurs through application-layer weakness classes including cross-site scripting, SQL injection, missing authorization checks, and cross-site request forgery that are characteristic of web-application plugin development. Vulnerabilities of this class have repeatedly been weaponized and incorporated into public exploit tooling, and the vendor's disclosures have attracted a moderate tendency toward public exploit availability. Defenders should prioritize updates to these plugins on WordPress instances and be alert to version-detection and exploitation vectors targeting the plugin ecosystem; live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Reputeinfosystems over time
Signals from CVEs in this vendor scope (53 CVEs).
53 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2022-0739CRITICAL The BookingPress WordPress plugin before 1.0.11 fails to properly sanitize user supplied POST data before it is used in a dynamically constructed SQL query via the bookingpress_fro | Mar 21, 2022 | 9.8 | 63 | NO | YES |
CVE-2022-0867CRITICAL The Pricing Table WordPress plugin before 3.6.1 fails to properly sanitize and escape user supplied POST data before it is being interpolated in an SQL statement and then executed | May 16, 2022 | 9.8 | 50 | NO | YES |
CVE-2024-4620CRITICAL The ARForms - Premium WordPress Form Builder Plugin WordPress plugin before 6.6 allows unauthenticated users to modify uploaded files in such a way that PHP code can be uploaded wh | Jun 7, 2024 | 9.8 | 40 | NO | YES |
CVE-2019-16902HIGH In the ARforms plugin 3.7.1 for WordPress, arf_delete_file in arformcontroller.php allows unauthenticated deletion of an arbitrary file by supplying the full pathname. | Sep 27, 2019 | 7.5 | 40 | NO | YES |
CVE-2026-57338HIGH Unauthenticated Cross Site Scripting (XSS) in ARForms <= 7.1.2 versions. | Jun 29, 2026 | 7.1 | 32 | NO | NO |
CVE-2023-52200CRITICAL Cross-Site Request Forgery (CSRF), Deserialization of Untrusted Data vulnerability in Repute Infosystems ARMember – Membership Plugin, Content Restriction, Member Levels, User Prof | Jan 8, 2024 | 9.8 | 29 | NO | NO |
CVE-2022-47425HIGH Missing Authorization vulnerability in Repute Infosystems ARMember allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ARMember: from n/a thr | Dec 9, 2025 | 8.8 | 28 | NO | NO |
CVE-2022-46808CRITICAL Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Repute Infosystems ARMember armember-membership allows SQL Injection.This issu | Nov 3, 2023 | 9.8 | 28 | NO | NO |
CVE-2022-42888HIGH Unauth. Privilege Escalation vulnerability in ARMember premium plugin <= 5.5.1 on WordPress. | Dec 6, 2022 | 8.8 | 28 | NO | NO |
CVE-2024-6660HIGH The BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privile | Jul 17, 2024 | 8.8 | 26 | NO | NO |
Signals from CVEs in this vendor scope (53 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Reputeinfosystems.
Media articles that mention a CVE ID that affects a product developed by Reputeinfosystems — matched by CVE ID, not by vendor name.