Repute Infosystems Armember vulnerabilities
10 vulnerabilities
Known vulnerabilities in Repute Infosystems Armember, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2022-47140repute infosystems · armember +2 moreWordPress ARMember Plugin <= 4.0.1 is vulnerable to Cross Site Scripting (XSS)Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Repute InfoSystems ARMember plugin <= 4.0.1 versions.EPSS0.38%HighCVE-2022-47425repute infosystems · armember +2 moreWordPress ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup plugin <= 3.4.10 - Broken Access ControlMissing Authorization vulnerability in Repute Infosystems ARMember allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ARMember: from n/a through 3.4.10.EPSS0.29%HighCVE-2022-47424repute infosystems · armember +3 moreWordPress ARMember plugin <= 4.0.5 - Cross Site Request Forgery (CSRF)Cross-Site Request Forgery (CSRF) vulnerability in Repute InfoSystems ARMember, Repute InfoSystems ARMember Premium allows Cross-Site Request Forgery.This issue affects ARMember: from n/a through 4.0.5; ARMember Premium: from n/a before 6.7.1.EPSS0.23%CriticalCVE-2022-46808repute infosystems · armember +2 moreWordPress ARMember Plugin <= 3.4.11 is vulnerable to SQL InjectionImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Repute Infosystems ARMember armember-membership allows SQL Injection.This issue affects ARMember: from n/a through 3.4.11.EPSS0.64%CriticalCVE-2024-32948repute infosystems · armember +2 moreWordPress ARMember – Membership Plugin plugin <= 4.0.28 - Broken Access Control vulnerabilityMissing Authorization vulnerability in Repute Infosystems ARMember.This issue affects ARMember: from n/a through 4.0.28.EPSS0.57%CriticalCVE-2024-30223repute infosystems · armember +2 moreWordPress ARMember plugin <= 4.0.26 - Unauthenticated PHP Object Injection vulnerabilityDeserialization of Untrusted Data vulnerability in Repute Infosystems ARMember.This issue affects ARMember: from n/a through 4.0.26.EPSS0.65%HighCVE-2024-30222repute infosystems · armember +2 moreWordPress ARMember plugin <= 4.0.26 - PHP Object Injection vulnerabilityDeserialization of Untrusted Data vulnerability in Repute Infosystems ARMember.This issue affects ARMember: from n/a through 4.0.26.EPSS0.61%HighCVE-2023-51356repute infosystems · armember +2 moreWordPress ARMember plugin <= 4.0.10 - Privilege Escalation vulnerabilityImproper Privilege Management vulnerability in Repute Infosystems ARMember allows Privilege Escalation.This issue affects ARMember: from n/a through 4.0.10.EPSS0.55%HighCVE-2023-47837repute infosystems · armember +2 moreWordPress ARMember plugin <= 4.0.10 - Membership Plan Bypass vulnerabilityImproper Privilege Management vulnerability in Repute Infosystems ARMember allows Privilege Escalation.This issue affects ARMember: from n/a through 4.0.10.EPSS0.39%MediumCVE-2023-33323repute infosystems · armember +2 moreWordPress ARMember Plugin <= 4.0.2 is vulnerable to Cross Site Scripting (XSS)Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Repute InfoSystems ARMember plugin <= 4.0.2 versions.EPSS0.37%