Advisories · Technology
ARMember Premium – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup.
Every CVE that names ARMember Premium – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.2 High
ARMember Premium <= 7.8.1 - Unauthenticated Stored Cross-Site Scripting via Registration Custom Field
- ARMember Premium – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup
- Cross-site scripting (XSS)
- CVSS 7.5 High
ARMember Premium <= 7.3.1 - Unauthenticated SQL Injection via 'order' Parameter
- ARMember Premium – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup
- SQL injection
- CVSS 6.5 Medium
ARMember Premium <= 7.3.1 - Authenticated (Subscriber+) SQL Injection via 'sSortDir_0' Parameter
- ARMember Premium – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+
ARMember Premium <= 7.3.1 - Insecure Password Reset Mechanism to Unauthenticated Privilege Escalation
- ARMember Premium – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup
- Authentication bypass
- CVSS 6.3 Medium
ARMember Premium <= 6.7 - Cross-Site Request Forgery via multiple functions
- ARMember Premium – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup
- Cross-site request forgery (CSRF)