CVE-2022-46808

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Repute Infosystems ARMember armember-membership allows SQL Injection.This issue affects ARMember: from n/a through 3.4.11...

CVE-2022-46808

CVE-2022-46808 affects ARMember (armember-membership) for WordPress. Description confirms an unauthenticated SQL Injection due to improper neutralization, impacting ARMember versions up to 3.4.11. The vulnerability is classified as high severity (NVD metrics show CVSS v3.1 base score 9.8; PatchSt...

WordPress ARMember Plugin <= 3.4.11 is vulnerable to SQL Injection

Software ARMember Type Plugin Vulnerable versions = 3.4.11 Fixed in 4.0 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2022-46808 Patch priority High CVSS severity High 8.2 Developer Claim ownership PSID 69cdf488ab0c Credits Le Ngoc Anh Required privilege Unauthenticated Publishe...