CVE-2022-1903

CVE-2022-1903 Title: ARMember 3.4.8 - Unauthenticated Admin Account Takeover Author: Cyllective https://cyllective.com/ CVE: CVE-2022-1903 安装 git clone https://github.com/biulove0x/CVE-2022-1903.git cd CVE-2022-1903/ python3 -m pip install -r requirements.txt 如何运行自动利用 $ python3 ARMember.py --help...

CVE-2024-7703

CVE-2024-7703 CVE-2024-7703 漏洞利用：通过 SVG 文件上传在 ARMember WordPress 插件中实现存储型跨站脚本（XSS）攻击 概述 本仓库包含针对编号为 CVE-2024-7703 的漏洞的概念验证（PoC）漏洞利用代码。该漏洞影响 ARMember WordPress 插件，具体而言，4.0.37 及更早版本均受影响。该漏洞允许拥有订阅者（Subscriber）级别或更高访问权限的已认证攻击者通过上传恶意 SVG 文件来实施存储型跨站脚本（XSS）攻击。 摘要： WordPress 的 ARMember – Membership Plugin...

WordPress ARMember Premium <= 7.3.1 - Unauthenticated SQL Injection

The ARMember Premium plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter of the 'armdirectorypagingaction' AJAX action in all versions up to, and including, 7.3.1. This is due to insufficient escaping on the user-supplied 'order' and 'orderby' parameters and the lack of...

ARMember < 3.4.8 - Unauthenticated Admin Account Takeover

The ARMember WordPress plugin before 3.4.8 is vulnerable to account takeover even the administrator due to missing nonce and authorization checks in an AJAX action available to unauthenticated users, allowing them to change the password of arbitrary users by knowing their username. id:...

CVE-2026-5076

☠️ CVE-2026-5076 ARMember Premium = 7.3.1 不安全的密码重置机制 → 完全管理员账户接管 数据库中以明文存储的密码重置密钥 + SQL注入 = 完全管理员接管 📋 漏洞信息 项目| 详情 ---|--- CVE ID| CVE-2026-5076 插件| ARMember – Membership Plugin & Content Restriction 受影响版本| Premium = 7.3.1 已修补版本| 7.3.2 CVSS 评分| 9.8 严重 CWE| CWE-640: 弱密码恢复 类型| 不安全的密码重置机制 → 明文密钥存储...

CVE-2026-5076

CVE-2026-5076 - Vulnerabilidad de restablecimiento de contraseña de ARMember Información de la vulnerabilidad Elemento| Detalle ---|--- ID de CVE| CVE-2026-5076 Plugin| ARMember – Membership Plugin & Content Restriction Versión afectada| Premium = 7.3.1 Versión corregida| 7.3.2 Puntuación CVSS| 9...

CVE-2026-15302

The ARMember plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.0.27 via the 'X-FILENAME' HTTP header. This makes it possible for unauthenticated attackers to upload and overwrite certain files e.g., CSS to directories outside the...

CVE-2026-15302 ARMember <= 4.0.27 - Directory Traversal via X-FILENAME

The ARMember plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.0.27 via the 'X-FILENAME' HTTP header. This makes it possible for unauthenticated attackers to upload and overwrite certain files e.g., CSS to directories outside the...

EUVD-2026-42792

The ARMember plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.0.27 via the 'X-FILENAME' HTTP header. This makes it possible for unauthenticated attackers to upload and overwrite certain files e.g., CSS to directories outside the...

CVE-2026-15302

The ARMember plug-in for WordPress (affected: all versions up to and including 4.0.27) is vulnerable to Directory Traversal via the X-FILENAME HTTP header. Unauthenticated attackers can upload and overwrite certain files (e.g., CSS) outside the wp-content/uploads/armember directory. This is a net...

CVE-2026-15302

The ARMember plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.0.27 via the 'X-FILENAME' HTTP header. This makes it possible for unauthenticated attackers to upload and overwrite certain files e.g., CSS to directories outside the...

CVE-2026-15302 ARMember <= 4.0.27 - Directory Traversal via X-FILENAME

The ARMember plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.0.27 via the 'X-FILENAME' HTTP header. This makes it possible for unauthenticated attackers to upload and overwrite certain files e.g., CSS to directories outside the...

PT-2026-57077

The ARMember plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.0.27 via the 'X-FILENAME' HTTP header. This makes it possible for unauthenticated attackers to upload and overwrite certain files e.g., CSS to directories outside the...

CVE-2026-15302: Absolute Path Traversal

The ARMember plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.0.27 via the 'X-FILENAME' HTTP header. This makes it possible for unauthenticated attackers to upload and overwrite certain files e.g., CSS to directories outside the...

CVE-2026-27060

Deserialization of Untrusted Data vulnerability in Repute Infosystems ARMember Premium allows Object Injection. This issue affects ARMember Premium: from n/a before 7.6...

EUVD-2026-41327

Contributor PHP Object Injection in ARMember Premium = 7.0 versions...

CVE-2026-27060 WordPress ARMember Premium plugin < 7.6 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Repute Infosystems ARMember Premium allows Object Injection. This issue affects ARMember Premium: from n/a before 7.6...

CVE-2026-27060

CVE-2026-27060 details (connected documents) : A PHP Object Injection vulnerability affects the WordPress ARMember Premium plugin (&lt;= 7.0). The root cause is PHP Object Injection in ARMember Premium

CVE-2026-27060

Deserialization of Untrusted Data vulnerability in Repute Infosystems ARMember Premium allows Object Injection. This issue affects ARMember Premium: from n/a before 7.6...

CVE-2026-27060 WordPress ARMember Premium plugin < 7.6 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Repute Infosystems ARMember Premium allows Object Injection. This issue affects ARMember Premium: from n/a before 7.6...