Security
فارسی
All products

armember

WordPress · Plugin
9 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
ARMember Premium <= 7.8.1 - Unauthenticated Stored Cross-Site Scripting via Registration Custom FieldCVE-2026-93427 armember WordPress High Fix reported
ARMember Premium – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 7.9.0 - Unauthenticated SQL InjectionCVE-2026-42417 armember WordPress High Fix reported
ARMember Premium – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 7.5 - Authenticated (Contributor+) PHP Object InjectionCVE-2026-27060 armember WordPress High Fix reported
ARMember Premium <= 7.3.1 - Unauthenticated SQL Injection via 'order' ParameterCVE-2026-5073 armember WordPress High Fix reported
ARMember Premium <= 7.3.1 - Authenticated (Subscriber+) SQL Injection via 'sSortDir_0' ParameterCVE-2026-5074 armember WordPress Medium Fix reported
ARMember Premium <= 7.3.1 - Insecure Password Reset Mechanism to Unauthenticated Privilege EscalationCVE-2026-5076 armember WordPress Critical Fix reported
ARMember Premium <= 6.7 - Cross-Site Request Forgery via multiple functionsCVE-2024-5596 armember WordPress Medium Fix reported
ARMember Premium <= 5.9.2 - Missing AuthorizationCVE-2023-39994 armember WordPress Medium Fix reported
ARMember Premium <= 5.5.1 - Privilege EscalationCVE-2022-42888 armember WordPress Critical Fix reported