ARI Soft

Records12All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

ARI Soft records in CISA KEV

No ARI Soft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ari Stream Quiz 3 records MEDIUM Ari Adminer 2 records LOW Contact Form 7 Connector 2 records MEDIUM Ari Fancy Lightbox 1 record LOW

Records

3 records in Ari Stream Quiz · all components

TI-2023-28610 CVE-2023-52182 · GHSA-983r-78qh-9frx

WordPress ARI Stream Quiz Plugin <= 1.3.0 is vulnerable to PHP Object Injection

MEDIUM 43

Deserialization of Untrusted Data vulnerability in ARI Soft ARI Stream Quiz – WordPress Quizzes Builder.This issue affects ARI Stream Quiz – WordPress Quizzes Builder: from n/a through 1.3.0.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00622 Published 2023-12-31 No fix listed CWE-502

TI-2023-28139 CVE-2023-51487 · GHSA-rh76-8g69-p8g8

WordPress ARI Stream Quiz – WordPress Quizzes Builder plugin <= 1.2.32 - Cross Site Request Forgery (CSRF) vulnerability

LOW 37

Cross-Site Request Forgery (CSRF) vulnerability in ARI Soft ARI Stream Quiz.This issue affects ARI Stream Quiz: from n/a through 1.2.32.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00221 Published 2024-03-16 No fix listed CWE-352

TI-2023-25943 CVE-2023-47835 · GHSA-pfc8-7rv7-wh6v

WordPress ARI Stream Quiz Plugin <= 1.2.32 is vulnerable to Cross Site Scripting (XSS)

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ARI Soft ARI Stream Quiz – WordPress Quizzes Builder plugin <= 1.2.32 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00377 Published 2023-11-22 No fix listed CWE-79

Open these records in search →

Critical	1
High	4
Medium	7
Low	0
No CVSS	0