Reputeinfosystems Armember vulnerabilities

• repute infosystems armember premium WordPress ARMember Premium plugin <= 7.8 - SQL Injection vulnerability CVE-2026-42417 9.3 CriticalOctober 6, 2026
• reputeinfosystems armember – membership plugin, content restriction, member levels, user profile & user signup ARMember <= 4.0.27 - Directory Traversal via X-FILENAME CVE-2026-15302 5.3 MediumJuly 10, 2026
• reputeinfosystems armember – membership plugin, content restriction, member levels, user profile & user signup ARMember <= 4.0.60 - Unauthenticated SQL Injection via 'orderby' Parameter CVE-2026-7649 7.5 HighMay 2, 2026
• repute infosystems armember WordPress ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup plugin <= 3.4.10 - Broken Access Control CVE-2022-47425 4.3 MediumDecember 9, 2025
• repute infosystems armember premium, reputeinfosystems armember +1 more WordPress ARMember Premium plugin <= 5.9.2 - Broken Access Control CVE-2023-39994 4.3 MediumJanuary 2, 2025
• reputeinfosystems armember – membership plugin, content restriction, member levels, user profile & user signup ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 4.0.51 - Authenticated (Subscriber+) Arbitrary Shortcode Execution CVE-2024-10681 6.3 MediumDecember 6, 2024
• repute infosystems armember, armember premium +1 more WordPress ARMember plugin <= 4.0.5 - Cross Site Request Forgery (CSRF) CVE-2022-47424 5.4 MediumNovember 19, 2024
• reputeinfosystems armember – membership plugin, content restriction, member levels, user profile & user signup ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 4.0.37 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Upload CVE-2024-7703 Public exploit 6.4 MediumAugust 17, 2024
• armemberplugin armember WordPress ARMember plugin <= 4.0.10 - Membership Plan Bypass vulnerability CVE-2023-47837 8.3 HighJune 4, 2024
• repute infosystems armember WordPress ARMember plugin <= 4.0.10 - Privilege Escalation vulnerability CVE-2023-51356 8.8 HighMay 17, 2024
• reputeinfosystems armember – membership plugin, content restriction, member levels, user profile & user signup ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 4.0.30 - Open Redirect CVE-2024-4133 6.1 MediumMay 2, 2024
• armemberplugin armember WordPress ARMember – Membership Plugin plugin <= 4.0.28 - Broken Access Control vulnerability CVE-2024-32948 9.1 CriticalApril 24, 2024
• repute infosystems armember WordPress ARMember plugin <= 4.0.26 - PHP Object Injection vulnerability CVE-2024-30222 8.5 HighMarch 28, 2024
• repute infosystems armember WordPress ARMember plugin <= 4.0.26 - Unauthenticated PHP Object Injection vulnerability CVE-2024-30223 9.0 CriticalMarch 28, 2024
• repute infosystems armember – membership plugin, content restriction, member levels, user profile & user signup, reputeinfosystems armember +1 more WordPress ARMember plugin <= 4.0.23 - Cross Site Scripting (XSS) vulnerability CVE-2024-27995 5.9 MediumMarch 21, 2024
• reputeinfosystems armember, arforms, armember – membership plugin, content restriction, member levels, user profile & user signup +2 more ARMember <= 4.0.24 - Improper Access Control to Sensitive Information Exposure via REST API CVE-2024-0969 5.3 MediumFebruary 5, 2024
• repute infosystems armember – membership plugin, content restriction, member levels, user profile & user signup, reputeinfosystems armember +1 more WordPress ARMember Plugin <= 4.0.22 is vulnerable to Cross Site Request Forgery (CSRF) leading to PHP Object Injection CVE-2023-52200 9.6 CriticalJanuary 8, 2024
• repute infosystems armember WordPress ARMember Plugin <= 3.4.11 is vulnerable to SQL Injection CVE-2022-46808 8.2 HighNovember 3, 2023
• armemberplugin armember, reputeinfosystems armember – membership plugin, content restriction, member levels, user profile & user signup +1 more ARMember Lite - Membership Plugin <= 4.0.16 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-3996 4.4 MediumOctober 20, 2023
• armemberplugin armember, reputeinfosystems armember – membership plugin, content restriction, member levels, user profile & user signup +1 more ARMember <= 4.0.5 - Cross-Site Request Forgery CVE-2023-3011 6.5 MediumJuly 12, 2023
• repute infosystems armember WordPress ARMember Plugin <= 4.0.2 is vulnerable to Cross Site Scripting (XSS) CVE-2023-33323 5.9 MediumJune 22, 2023
• repute infosystems armember WordPress ARMember Plugin <= 4.0.1 is vulnerable to Cross Site Scripting (XSS) CVE-2022-47140 7.1 HighJune 12, 2023
• armemberplugin armember WordPress ARMember Plugin <= 5.5.1 is vulnerable to Privilege Escalation CVE-2022-42888 9.8 CriticalDecember 6, 2022
• armemberplugin armember, reputeinfosystems armember – membership plugin, content restriction, member levels, user profile & user signup +1 more ARMember < 3.4.8 - Unauthenticated Admin Account Takeover CVE-2022-1903 Public exploit 8.1 HighJune 27, 2022