Skip to contentReputeinfosystems Armember – Membership Plugin, Content Restriction, Member Levels, User Profile & User Signup vulnerabilities
- reputeinfosystems armember – membership plugin, content restriction, member levels, user profile & user signupARMember <= 4.0.27 - Directory Traversal via X-FILENAMECVE-2026-153025.3 Medium
- reputeinfosystems armember – membership plugin, content restriction, member levels, user profile & user signupARMember <= 4.0.60 - Unauthenticated SQL Injection via 'orderby' ParameterCVE-2026-76497.5 High
- reputeinfosystems armember – membership plugin, content restriction, member levels, user profile & user signupARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 4.0.51 - Authenticated (Subscriber+) Arbitrary Shortcode ExecutionCVE-2024-106816.3 Medium
- reputeinfosystems armember – membership plugin, content restriction, member levels, user profile & user signupARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 4.0.37 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File UploadCVE-2024-7703Public exploit6.4 Medium
- reputeinfosystems armember – membership plugin, content restriction, member levels, user profile & user signupARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 4.0.30 - Open RedirectCVE-2024-41336.1 Medium
- repute infosystems armember – membership plugin, content restriction, member levels, user profile & user signup, reputeinfosystems armember +1 moreWordPress ARMember plugin <= 4.0.23 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-279955.9 Medium
- reputeinfosystems armember, arforms, armember – membership plugin, content restriction, member levels, user profile & user signup +2 moreARMember <= 4.0.24 - Improper Access Control to Sensitive Information Exposure via REST APICVE-2024-09695.3 Medium
- repute infosystems armember – membership plugin, content restriction, member levels, user profile & user signup, reputeinfosystems armember +1 moreWordPress ARMember Plugin <= 4.0.22 is vulnerable to Cross Site Request Forgery (CSRF) leading to PHP Object InjectionCVE-2023-522009.6 Critical
- armemberplugin armember, reputeinfosystems armember – membership plugin, content restriction, member levels, user profile & user signup +1 moreARMember Lite - Membership Plugin <= 4.0.16 - Authenticated (Administrator+) Stored Cross-Site ScriptingCVE-2023-39964.4 Medium
- armemberplugin armember, reputeinfosystems armember – membership plugin, content restriction, member levels, user profile & user signup +1 moreARMember <= 4.0.5 - Cross-Site Request ForgeryCVE-2023-30116.5 Medium
- armemberplugin armember, reputeinfosystems armember – membership plugin, content restriction, member levels, user profile & user signup +1 moreARMember < 3.4.8 - Unauthenticated Admin Account TakeoverCVE-2022-1903Public exploit8.1 High