Advisories · Technology
reputeinfosystems ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup.
Every CVE that names reputeinfosystems ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
ARMember <= 4.0.27 - Directory Traversal via X-FILENAME
- reputeinfosystems ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup
- Path traversal
- CVSS 7.5 High
ARMember <= 4.0.60 - Unauthenticated SQL Injection via 'orderby' Parameter
- reputeinfosystems ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup
- SQL injection
- CVSS 6.3 Medium
ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 4.0.51 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
- reputeinfosystems ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup
- Code injection
- CVSS 6.4 Medium
ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 4.0.37 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Upload
- reputeinfosystems ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup
- Cross-site scripting (XSS)
- CVSS 6.1 Medium
ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 4.0.30 - Open Redirect
- reputeinfosystems ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup
- Open redirect
- CVSS 5.3 Medium
ARMember <= 4.0.24 - Improper Access Control to Sensitive Information Exposure via REST API
- reputeinfosystems ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup
- Broken access control
- CVSS 4.4 Medium
ARMember Lite - Membership Plugin <= 4.0.16 - Authenticated (Administrator+) Stored Cross-Site Scripting
- reputeinfosystems ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
ARMember <= 4.0.5 - Cross-Site Request Forgery
- reputeinfosystems ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup
- Cross-site request forgery (CSRF)