CVE-2022-1903

🗓️ 27 Jun 2022 08:58:19Reported by WPScanType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 97 Views

The ARMember WordPress plugin before 3.4.8 is vulnerable to account takeover due to missing nonce and authorization checks in an AJAX action

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2022-1903	27 Apr 202309:45	–	circl
CNNVD	WordPress plugin ARMember 安全漏洞	27 Jun 202200:00	–	cnnvd
CNVD	WordPress ARMember plugin has an unspecified vulnerability	30 Jun 202200:00	–	cnvd
Cvelist	CVE-2022-1903 ARMember < 3.4.8 - Unauthenticated Admin Account Takeover	27 Jun 202208:58	–	cvelist
Nuclei	ARMember < 3.4.8 - Unauthenticated Admin Account Takeover	3 Jun 202606:04	–	nuclei
NVD	CVE-2022-1903	27 Jun 202209:15	–	nvd
Patchstack	WordPress ARMember plugin <= 3.4.7 - Unauthenticated Admin Account Takeover vulnerability	6 Jun 202200:00	–	patchstack
Prion	Authorization	27 Jun 202209:15	–	prion
RedhatCVE	CVE-2022-1903	22 May 202523:32	–	redhatcve
VulnCheck KEV	VulnCheck KEV: CVE-2022-1903	6 Jun 202200:00	–	vulncheck_kev

NVD

Vulners

Node

armemberplugin armemberRange<3.4.8wordpress

[
  {
    "product": "ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "3.4.8",
        "status": "affected",
        "version": "3.4.8",
        "versionType": "custom"
      }
    ]
  }
]