WordPress ARMember Plugin <= 4.0.1 is vulnerable to Cross Site Scripting (XSS)

Software ARMember Type Plugin Vulnerable versions = 4.0.1 Fixed in 4.0.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-47140 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 04bcef5f802c Credits Team WeBoB Required...

ARMember < 4.0.2 - Reflected XSS

The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

WordPress ARMember Plugin <= 3.4.11 is vulnerable to SQL Injection

Software ARMember Type Plugin Vulnerable versions = 3.4.11 Fixed in 4.0 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2022-46808 Patch priority High CVSS severity High 8.2 Developer Claim ownership PSID 69cdf488ab0c Credits Le Ngoc Anh Required privilege Unauthenticated Publishe...

PT-2023-27174 · WordPress +1 · Armember Lite +1

Name of the Vulnerable Software and Affected Versions: The ARMember Lite - Membership Plugin for WordPress versions up to, and including, 4.0.14 Description: The issue is related to Stored Cross-Site Scripting via admin settings due to insufficient input sanitization and output escaping. This...

WordPress ARMember Plugin <= 3.4.10 is vulnerable to Broken Access Control

Software ARMember Type Plugin Vulnerable versions = 3.4.10 Fixed in 3.4.11 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2022-47425 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID fbb3fb63c003 Credits Cat Required privilege Subscriber...

CVE-2022-42888

Unauth. Privilege Escalation vulnerability in ARMember premium plugin = 5.5.1 on WordPress...

CVE-2022-42888

Unauth. Privilege Escalation vulnerability in ARMember premium plugin = 5.5.1 on WordPress...

Privilege escalation

Unauth. Privilege Escalation vulnerability in ARMember premium plugin = 5.5.1 on WordPress...

CVE-2022-42888 WordPress ARMember Plugin <= 5.5.1 is vulnerable to Privilege Escalation

Unauth. Privilege Escalation vulnerability in ARMember premium plugin = 5.5.1 on WordPress...

CVE-2022-42888 WordPress ARMember Plugin <= 5.5.1 is vulnerable to Privilege Escalation

Unauth. Privilege Escalation vulnerability in ARMember premium plugin = 5.5.1 on WordPress...

CVE-2022-42888

ARMember premium plugin for WordPress (versions

PT-2022-26644 · WordPress · Armember

Name of the Vulnerable Software and Affected Versions: ARMember premium plugin versions = 5.5.1 Description: The issue is related to an Unauth. Privilege Escalation vulnerability. It affects the ARMember premium plugin on WordPress. Recommendations: For ARMember premium plugin versions = 5.5.1,...

WordPress plugin ARMember 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. bbPress is a forum plugin used in it. WordPress plugin is an application plugin. A...

ARMember < 5.6 - Unauthenticated Privilege Escalation

The plugin could allow unauthenticated attackers to escalate themselves as admin...

WordPress plugin ARMember 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

WordPress plugin ARMember 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, with the ability to host personal blog sites on PHP and MySQL based servers.WordPress...

WordPress ARMember plugin has an unspecified vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress ARMember plugin versions prior to 3.4.8 have a security vulnerability that stems from the plugin's...

CVE-2022-1903

The ARMember WordPress plugin before 3.4.8 is vulnerable to account takeover even the administrator due to missing nonce and authorization checks in an AJAX action available to unauthenticated users, allowing them to change the password of arbitrary users by knowing their username...

CVE-2022-1903

The ARMember WordPress plugin before 3.4.8 is vulnerable to account takeover even the administrator due to missing nonce and authorization checks in an AJAX action available to unauthenticated users, allowing them to change the password of arbitrary users by knowing their username...

CVE-2022-1903

The ARMember WordPress plugin before 3.4.8 is vulnerable to account takeover even the administrator due to missing nonce and authorization checks in an AJAX action available to unauthenticated users, allowing them to change the password of arbitrary users by knowing their username...