CVE-2026-12421 | ARforms Plugin up to 7.2.1 on WordPress Password cross site scripting

July 23, 2026 Yanac

A vulnerability, which was classified as problematic, was found in ARforms Plugin up to 7.2.1 on WordPress. Affected by this issue is some unknown functionality. The manipulation of the argument Password results in cross site scripting.

This vulnerability is reported as CVE-2026-12421. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More