What’s Vulnerable › Products
reputeinfosystems ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup vulnerabilities
10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.
Latest reputeinfosystems ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup vulnerabilities
- CVE-2026-15302 — ARMember <= 4.0.27 - Directory Traversal via X-FILENAME (CVSS 5.3)
- CVE-2026-7649 — ARMember <= 4.0.60 - Unauthenticated SQL Injection via 'orderby' Parameter (CVSS 7.5)
- CVE-2024-10681 — ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 4.0.51 - Authenticated (Subscriber+) Arbitrary Shortcode Execution (CVSS 6.3)
- CVE-2024-7703 — ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 4.0.37 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Upload (CVSS 6.4)
- CVE-2024-4133 — ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 4.0.30 - Open Redirect (CVSS 6.1)
- CVE-2023-3996 — ARMember Lite - Membership Plugin <= 4.0.16 - Authenticated (Administrator+) Stored Cross-Site Scripting (CVSS 4.8)
- CVE-2022-47421 — WordPress ARMember (free) and ARMember (premium) plugins - vulnerable to Auth. Stored Cross Site Scripting (XSS) (CVSS 4.8)
- CVE-2023-3011 — ARMember <= 4.0.5 - Cross-Site Request Forgery (CVSS 8.8)
- CVE-2022-42888 — WordPress ARMember Plugin <= 5.5.1 is vulnerable to Privilege Escalation (CVSS 8.8)
- CVE-2022-1903 — ARMember < 3.4.8 - Unauthenticated Admin Account Takeover (CVSS 8.1)