ARI Soft

Records12All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

ARI Soft records in CISA KEV

No ARI Soft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ari Stream Quiz 3 records MEDIUM Ari Adminer 2 records LOW Contact Form 7 Connector 2 records MEDIUM Ari Fancy Lightbox 1 record LOW

Records

2 records in Ari Adminer · all components

TI-2019-15269 CVE-2019-25215 · GHSA-h2c6-h57g-w59g

ARI-Adminer <= 1.1.14 - Missing Authorization and No Direct File Access Restrictions

LOW 38

The ARI-Adminer plugin for WordPress is vulnerable to authorization bypass due to a lack of file access controls in nearly every file of the plugin in versions up to, and including, 1.1.14.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00413 Published 2024-10-16 No fix listed CWE-862

TI-2020-13544 CVE-2020-19156 · GHSA-g278-j36h-xmv9

Cross Site Scripting (XSS) in Ari Adminer v1 allows remote attackers to execute arbitrary…

LOW 26

Cross Site Scripting (XSS) in Ari Adminer v1 allows remote attackers to execute arbitrary code via the 'Title' parameter of the 'Add New Connections' component when the 'save()' function is called.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00853 Published 2021-09-15 No fix listed CWE-79

Open these records in search →

Critical	1
High	4
Medium	7
Low	0
No CVSS	0