CVE-2026-3652 | ARforms Plugin up to 7.1.3 on WordPress Dashboard arf_save_incomplete_form_data cross site scripting

June 24, 2026 Yanac

A vulnerability, which was classified as problematic, was found in ARforms Plugin up to 7.1.3 on WordPress. The impacted element is the function arf_save_incomplete_form_data of the component Dashboard. The manipulation results in cross site scripting.

This vulnerability is identified as CVE-2026-3652. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More