armember vulnerabilities
5 published CVEs name armember among the affected products.
- 5Published CVEs5 of them scored
- 4Last 12 monthspublished in the last year
- 1Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-93427
ARMember Premium <= 7.8.1 - Unauthenticated Stored Cross-Site Scripting via Registration Custom Field
armember · ARMember Premium – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup
High7.2 - CVE-2026-5073
ARMember Premium <= 7.3.1 - Unauthenticated SQL Injection via 'order' Parameter
armember · ARMember Premium – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup
High7.5 - CVE-2026-5074
ARMember Premium <= 7.3.1 - Authenticated (Subscriber+) SQL Injection via 'sSortDir_0' Parameter
armember · ARMember Premium – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup
Medium6.5 - CVE-2026-5076
ARMember Premium <= 7.3.1 - Insecure Password Reset Mechanism to Unauthenticated Privilege Escalation
armember · ARMember Premium – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup
Critical9.8 - CVE-2024-5596
ARMember Premium <= 6.7 - Cross-Site Request Forgery via multiple functions
armember · ARMember Premium – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup
Medium6.3