CVE-2022-1903

🗓️ 27 Jun 2022 08:58:19Reported by WPScanType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 106 Views

The ARMember WordPress plugin before 3.4.8 is vulnerable to account takeover due to missing nonce and authorization checks in an AJAX action

Reporter	Title	Published	Views	Family All 12
ATTACKERKB	CVE-2022-1903	27 Jun 202209:15	–	attackerkb
Circl	CVE-2022-1903	27 Apr 202309:45	–	circl
CNNVD	WordPress plugin ARMember 安全漏洞	27 Jun 202200:00	–	cnnvd
CNVD	WordPress ARMember plugin has an unspecified vulnerability	30 Jun 202200:00	–	cnvd
Cvelist	CVE-2022-1903 ARMember < 3.4.8 - Unauthenticated Admin Account Takeover	27 Jun 202208:58	–	cvelist
Nuclei	ARMember < 3.4.8 - Unauthenticated Admin Account Takeover	24 Jun 202603:02	–	nuclei
NVD	CVE-2022-1903	27 Jun 202209:15	–	nvd
OSV	CVE-2022-1903	27 Jun 202209:15	–	osv
Patchstack	WordPress ARMember plugin <= 3.4.7 - Unauthenticated Admin Account Takeover vulnerability	6 Jun 202200:00	–	patchstack
Prion	Authorization	27 Jun 202209:15	–	prion

NVD

Vulners

Node

armemberplugin armemberRange<3.4.8wordpress

[
  {
    "product": "ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "3.4.8",
        "status": "affected",
        "version": "3.4.8",
        "versionType": "custom"
      }
    ]
  }
]