← All advisories

Unrated severityNVD Advisory· Published Jun 29, 2026· Updated Jun 29, 2026

WordPress ARForms plugin <= 7.1.2 - Reflected Cross Site Scripting (XSS) vulnerability

CVE-2026-57338

Description

Unauthenticated Cross Site Scripting (XSS) in ARForms <= 7.1.2 versions.

Affected products

1

WordPress/Arformsllm-fuzzy
Range: <=7.1.2
Package: https://wordpress.org/plugins/arforms

Patches

Vulnerability mechanics

References

1

patchstack.com/database/wordpress/plugin/arforms/vulnerability/wordpress-arforms-plugin-7-1-2-reflected-cross-site-scripting-xss-vulnerabilitymitrevdb-entry

News mentions

0

No linked articles in our index yet.