Reputeinfosystems Armember vulnerabilities
15 vulnerabilities
Known vulnerabilities in Reputeinfosystems Armember, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2022-47140repute infosystems · armember +2 moreWordPress ARMember Plugin <= 4.0.1 is vulnerable to Cross Site Scripting (XSS)Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Repute InfoSystems ARMember plugin <= 4.0.1 versions.EPSS0.38%HighCVE-2022-47425repute infosystems · armember +2 moreWordPress ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup plugin <= 3.4.10 - Broken Access ControlMissing Authorization vulnerability in Repute Infosystems ARMember allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ARMember: from n/a through 3.4.10.EPSS0.29%HighCVE-2022-47424repute infosystems · armember +3 moreWordPress ARMember plugin <= 4.0.5 - Cross Site Request Forgery (CSRF)Cross-Site Request Forgery (CSRF) vulnerability in Repute InfoSystems ARMember, Repute InfoSystems ARMember Premium allows Cross-Site Request Forgery.This issue affects ARMember: from n/a through 4.0.5; ARMember Premium: from n/a before 6.7.1.EPSS0.23%CriticalCVE-2022-42888armemberplugin · armember +2 moreWordPress ARMember Plugin <= 5.5.1 is vulnerable to Privilege EscalationUnauth. Privilege Escalation vulnerability in ARMember premium plugin <= 5.5.1 on WordPress.EPSS0.75%CriticalCVE-2022-46808repute infosystems · armember +2 moreWordPress ARMember Plugin <= 3.4.11 is vulnerable to SQL InjectionImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Repute Infosystems ARMember armember-membership allows SQL Injection.This issue affects ARMember: from n/a through 3.4.11.EPSS0.64%MediumCVE-2024-0969reputeinfosystems · armember +2 moreARMember <= 4.0.24 - Improper Access Control to Sensitive Information Exposure via REST APIThe ARMember plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.21 via the REST API. This makes it possible for unauthenticated attackers to bypass the plugin's "Default Restriction" feature and view restricted post content.EPSS0.48%MediumCVE-2024-27995repute infosystems · armember – membership plugin, content restriction, member levels, user profile & user signup +2 moreWordPress ARMember plugin <= 4.0.23 - Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Repute Infosystems ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup allows Stored XSS.This issue affects ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup: from n/a through 4.0.23.EPSS0.33%CriticalCVE-2024-32948repute infosystems · armember +2 moreWordPress ARMember – Membership Plugin plugin <= 4.0.28 - Broken Access Control vulnerabilityMissing Authorization vulnerability in Repute Infosystems ARMember.This issue affects ARMember: from n/a through 4.0.28.EPSS0.57%CriticalCVE-2024-30223repute infosystems · armember +2 moreWordPress ARMember plugin <= 4.0.26 - Unauthenticated PHP Object Injection vulnerabilityDeserialization of Untrusted Data vulnerability in Repute Infosystems ARMember.This issue affects ARMember: from n/a through 4.0.26.EPSS0.65%HighCVE-2024-30222repute infosystems · armember +2 moreWordPress ARMember plugin <= 4.0.26 - PHP Object Injection vulnerabilityDeserialization of Untrusted Data vulnerability in Repute Infosystems ARMember.This issue affects ARMember: from n/a through 4.0.26.EPSS0.61%CriticalCVE-2023-52200repute infosystems · armember – membership plugin, content restriction, member levels, user profile & user signup +2 moreWordPress ARMember Plugin <= 4.0.22 is vulnerable to Cross Site Request Forgery (CSRF) leading to PHP Object InjectionCross-Site Request Forgery (CSRF), Deserialization of Untrusted Data vulnerability in Repute Infosystems ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup.This issue affects ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup: n/a.EPSS0.27%HighCVE-2023-51356repute infosystems · armember +2 moreWordPress ARMember plugin <= 4.0.10 - Privilege Escalation vulnerabilityImproper Privilege Management vulnerability in Repute Infosystems ARMember allows Privilege Escalation.This issue affects ARMember: from n/a through 4.0.10.EPSS0.55%HighCVE-2023-47837repute infosystems · armember +2 moreWordPress ARMember plugin <= 4.0.10 - Membership Plan Bypass vulnerabilityImproper Privilege Management vulnerability in Repute Infosystems ARMember allows Privilege Escalation.This issue affects ARMember: from n/a through 4.0.10.EPSS0.39%MediumCVE-2023-39994repute infosystems · armember premium +2 moreWordPress ARMember Premium plugin <= 5.9.2 - Broken Access ControlMissing Authorization vulnerability in Repute InfoSystems ARMember Premium allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ARMember Premium: from n/a through 5.9.2.EPSS0.35%MediumCVE-2023-33323repute infosystems · armember +2 moreWordPress ARMember Plugin <= 4.0.2 is vulnerable to Cross Site Scripting (XSS)Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Repute InfoSystems ARMember plugin <= 4.0.2 versions.EPSS0.37%