281 matches found
PT-2024-14086 · Repute Infosystems · Armember
Name of the Vulnerable Software and Affected Versions: Repute Infosystems ARMember versions through 4.0.10 Description: The issue is related to Improper Privilege Management, allowing Privilege Escalation in Repute Infosystems ARMember. Recommendations: For versions through 4.0.10, update to a...
ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup < 4.0.27 - Authenticated (Contributor+) PHP Object Injection
Description The ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.0.26 via deserialization of untrusted input. This makes it possible for authenticated...
CVE-2024-4133
The ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 4.0.30. This is due to insufficient validation on the redirect url supplied via the redirectto parameter. This...
CVE-2024-4133 ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 4.0.30 - Open Redirect
The ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 4.0.30. This is due to insufficient validation on the redirect url supplied via the redirectto parameter. This...
CVE-2024-4133
CVE-2024-4133 concerns the ARMember – Membership Plugin for WordPress. Affected versions up to 4.0.30 are vulnerable to an Open Redirect caused by insufficient validation of the redirect_to parameter, enabling unauthenticated attackers to redirect users to malicious sites if they can persuade the...
CVE-2024-4133 ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 4.0.30 - Open Redirect
The ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 4.0.30. This is due to insufficient validation on the redirect url supplied via the redirectto parameter. This...
PT-2024-29359 · WordPress · Armember
Name of the Vulnerable Software and Affected Versions: The ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup plugin for WordPress versions prior to 4.0.31 Description: The issue is due to insufficient validation on the redirect url supplied via the...
WordPress plugin ARMember 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
WordPress ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup plugin <= 4.0.30 - Open Redirect vulnerability
Open Redirect vulnerability discovered by Krzysztof Zając in WordPress Plugin ARMember versions = 4.0.30...
WordPress ARMember Plugin <= 4.0.30 is vulnerable to Open Redirection
Software ARMember Type Plugin Vulnerable versions = 4.0.30 Fixed in 4.0.31 OWASP Top 10 A1: Injection Classification Open Redirection CVE CVE-2024-4133 Patch priority Low CVSS severity Low 4.7 Developer Claim ownership PSID 1161444e8597 Credits Krzysztof Zając Required privilege Unauthenticated...
ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup < 4.0.29 - Missing Authorization
Description The ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 4.0.28. This makes it possible for...
CVE-2024-32948
Missing Authorization vulnerability in Repute Infosystems ARMember.This issue affects ARMember: from n/a through 4.0.28...
CVE-2024-32948
Missing Authorization vulnerability in Repute Infosystems ARMember.This issue affects ARMember: from n/a through 4.0.28...
CVE-2024-32948 WordPress ARMember – Membership Plugin plugin <= 4.0.28 - Broken Access Control vulnerability
Missing Authorization vulnerability in Repute Infosystems ARMember.This issue affects ARMember: from n/a through 4.0.28...
CVE-2024-32948 WordPress ARMember – Membership Plugin plugin <= 4.0.28 - Broken Access Control vulnerability
Missing Authorization vulnerability in Repute Infosystems ARMember.This issue affects ARMember: from n/a through 4.0.28...
CVE-2024-32948
CVE-2024-32948 corresponds to a Missing Authorization vulnerability in ARMember (Repute Infosystems) affecting ARMember up to version 4.0.28. The vulnerability is categorized as network-exploitable with no user interaction, enabling an attacker with no privileges to access or modify restricted re...
WordPress plugin ARMember 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
PT-2024-24995 · Repute Infosystems · Armember
Name of the Vulnerable Software and Affected Versions: Repute Infosystems ARMember versions 4.0.28 and earlier Description: The issue is related to a Missing Authorization vulnerability. There is no information provided about the estimated number of potentially affected devices worldwide or...
WordPress ARMember – Membership Plugin plugin <= 4.0.28 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Kursat Cetin Patchstack in WordPress Plugin ARMember versions = 4.0.28...
WordPress ARMember Plugin <= 4.0.28 is vulnerable to Broken Access Control
Software ARMember Type Plugin Vulnerable versions = 4.0.28 Fixed in 4.0.29 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-32948 Patch priority High CVSS severity High 9.1 Developer Claim ownership PSID c0512654aaef Credits luc Required privilege...