Armember Security Vulnerabilities and Issues — Armember CVE List

ReputeinfosystemsArmember

14 matches found

CVE•added 2024/02/05 9:22 p.m.•82 views

CVE-2024-0969

ARMember for WordPress

5.3CVSS6.2AI score0.00482EPSS

CVE•added 2024/04/24 7:3 a.m.•74 views

CVE-2024-32948

CVE-2024-32948 corresponds to a Missing Authorization vulnerability in ARMember (Repute Infosystems) affecting ARMember up to version 4.0.28. The vulnerability is categorized as network-exploitable with no user interaction, enabling an attacker with no privileges to access or modify restricted re...

9.1CVSS5.1AI score0.00568EPSS

CVE•added 2024/03/28 5:4 a.m.•70 views

CVE-2024-30223

CVE-2024-30223 affects the WordPress ARMember plugin up to version 4.0.26, caused by unauthenticated PHP Object Injection via deserialization of untrusted input. Affected component: ARMember (WordPress plugin). Root cause: deserialization of untrusted data leading to PHP object injection. Impact ...

9.8CVSS5.2AI score0.00645EPSS

CVE•added 2024/03/21 3:0 p.m.•69 views

CVE-2024-27995

CVE-2024-27995 (ARMember) : The vulnerability is an authenticated (Administrator+) stored cross-site scripting flaw in Repute Infosystems ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup. The issue arises from improper neutralization of input during web...

5.9CVSS8.6AI score0.00334EPSS

CVE•added 2024/03/28 5:5 a.m.•69 views

CVE-2024-30222

CVE-2024-30222 affects ARMember WordPress plugin versions

8.8CVSS5.2AI score0.00608EPSS

CVE•added 2024/05/17 8:39 a.m.•63 views

CVE-2023-51356

CVE-2023-51356 corresponds to an Imp roper Privilege Management vulnerability in Repute Infosystems ARMember (WordPress plugin) affecting ARMember up to version 4.0.10. The issue allows Privilege Escalation for authenticated users (Subscriber+). The CVE details in connected sources indicate that ...

8.8CVSS6.8AI score0.00553EPSS

CVE•added 2023/11/03 12:36 p.m.•50 views

CVE-2022-46808

CVE-2022-46808 affects ARMember (armember-membership) for WordPress. Description confirms an unauthenticated SQL Injection due to improper neutralization, impacting ARMember versions up to 3.4.11. The vulnerability is classified as high severity (NVD metrics show CVSS v3.1 base score 9.8; PatchSt...

9.8CVSS8.9AI score0.00639EPSS

CVE•added 2024/11/19 5:21 p.m.•48 views

CVE-2022-47424

CVE-2022-47424 is a CSRF vulnerability in Repute InfoSystems ARMember (and ARMember Premium). Affected: ARMember up to version 4.0.5; ARMember Premium up to 6.7.0.x (before 6.7.1). Root cause is Cross-Site Request Forgery enabling unauthorized actions. Remediation: update ARMember to 4.0.6 or lat...

8.8CVSS5.5AI score0.00185EPSS

CVE•added 2025/01/02 3:3 p.m.•45 views

CVE-2023-39994

CVE-2023-39994 affects Repute InfoSystems ARMember Premium (WordPress plugin) up to version 5.9.2, via a Missing Authorization/Broken Access Control issue. The ARMember entry lists affected versions as

4.3CVSS8.5AI score0.00277EPSS

CVE•added 2023/06/22 12:12 p.m.•43 views

CVE-2023-33323

CVE-2023-33323 describes a Stored XSS in Repute InfoSystems ARMember plugin for WordPress, affecting versions

5.9CVSS5.1AI score0.00369EPSS

CVE•added 2024/01/08 7:18 p.m.•43 views

CVE-2023-52200

CVE-2023-52200 affects ARMember

9.8CVSS8.6AI score0.0027EPSS

CVE•added 2023/06/12 12:52 p.m.•41 views

CVE-2022-47140

CVE-2022-47140: Unauthenticated reflected XSS in Repute InfoSystems ARMember WordPress plugin prior to 4.0.1. Affected software: ARMember plugin for WordPress (versions

7.1CVSS6AI score0.00382EPSS

CVE•added 2024/06/04 10:10 a.m.•32 views

CVE-2023-47837

CVE-2023-47837 . Affected: WordPress ARMember plugin versions up to and including 4.0.10. Issue: Improper Privilege Management allowing Privilege Escalation for subscribers with low privileges. Root cause and impact as described in connected sources align on a membership plan bypass vulnerability...

8.8CVSS8.4AI score0.00386EPSS

CVE•added 2025/12/09 4:41 p.m.•22 views

CVE-2022-47425

ARMember for WordPress

8.8CVSS6.6AI score0.00255EPSS