ARForms WordPress Plugin Vulnerable to PHP Object Injection
- Severity
- CRITICAL
- CVSS
- 9.8
- Affected component
- arforms (wordpress)
- Patched version
- Not yet available
The ARForms plugin for WordPress is reportedly vulnerable to PHP Object Injection in all versions up to, and including, 1.8.5. This vulnerability allows unauthenticated attackers to inject a PHP Object.
What happened
An early warning has been issued for a critical vulnerability in the ARForms plugin for WordPress. The vulnerability, tracked as CVE-2024-13784, allows for PHP Object Injection via deserialization of untrusted input from form submissions. This makes it possible for unauthenticated attackers to inject a PHP Object, potentially leading to remote code execution.
The vulnerability affects all versions of the ARForms plugin up to and including 1.8.5. There is no evidence that this vulnerability has been exploited in the wild, but it is under investigation. Users are advised to take immediate action to mitigate potential risks.
What to do about it
- Upgrade the ARForms plugin to a version beyond 1.8.5.
- Ensure no plugins or themes with POP chains are installed on the site.
- Monitor the primary sources for updates on the vulnerability and any official fixes.
How 0Day would have caught this
arforms is anywhere in your dependency tree, the engineers who own the affected repositories get a push alert the moment it is flagged — no manual audit to remember to run.Read how this differs from waiting on a scanner to catch a known advisory, or see the exact, read-only access 0Day needs to do this for an organization.
Frequently asked questions
Am I affected?
You are affected if you are using the ARForms plugin for WordPress in versions up to and including 1.8.5.
What should I do right now?
Upgrade the ARForms plugin to a version beyond 1.8.5 and ensure no plugins or themes with POP chains are installed on the site.
Has an official fix been released?
No official fix has been published yet. Monitor the primary sources for updates.
What is the severity of this vulnerability?
The severity of this vulnerability is rated as CRITICAL with a CVSS score of 9.8.