CVE-2018-15818

7.5 highEPSS 2.0%

High (7.5) in reputeinfosystems repute arforms. EPSS 2.0% chance of exploitation in the next 30 days.

An issue was discovered in Repute ARForms 3.5.1 and prior. An attacker is able to delete any file on the server with web server privileges by sending a malicious request to admin-ajax.php.

Severity

CVSS 3.0

7.5 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS: 2.0% chance of exploitation in the next 30 days; higher than 81% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2019-03-21
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

reputeinfosystems:repute_arforms

References

http://packetstormsecurity.com/files/149981/WordPress-Arforms-3.5.1-Arbitrary-File-Delete.html
https://wpvulndb.com/vulnerabilities/9139
http://packetstormsecurity.com/files/149981/WordPress-Arforms-3.5.1-Arbitrary-File-Delete.html
https://wpvulndb.com/vulnerabilities/9139

Check your stack JSON