Vulnerabilities

TI-2022-23502 CVE-2022-47425 · GHSA-pxq2-6r2q-9mvq

Missing authorization in reputeinfosystems ARMember

LOW 38

Missing Authorization vulnerability in Repute Infosystems ARMember allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ARMember: from n/a through 3.4.10.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00292 Published 2025-12-09 No fix listed CWE-862

TI-2023-20886 CVE-2023-39994 · GHSA-ffqr-4qwv-gwp9

WordPress ARMember Premium plugin <= 5.9.2 - Broken Access Control

LOW 20

Missing Authorization vulnerability in Repute InfoSystems ARMember Premium allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ARMember Premium: from n/a through 5.9.2.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00351 Published 2025-01-02 No fix listed CWE-862

TI-2022-23501 CVE-2022-47424 · GHSA-v5fr-mh59-qcqr

WordPress ARMember plugin <= 4.0.5 - Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Repute InfoSystems ARMember, Repute InfoSystems ARMember Premium allows Cross-Site Request Forgery.This issue affects ARMember: from n/a through 4.0.5; ARMember Premium:…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00241 Published 2024-11-19 Fixed in 6.7.1 CWE-352

TI-2023-25945 CVE-2023-47837 · GHSA-6fj5-f379-phjf

WordPress ARMember plugin <= 4.0.10 - Membership Plan Bypass vulnerability

MEDIUM 40

Improper Privilege Management vulnerability in Repute Infosystems ARMember allows Privilege Escalation.This issue affects ARMember: from n/a through 4.0.10.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00386 Published 2024-06-04 No fix listed CWE-269

TI-2023-28014 CVE-2023-51356 · GHSA-c4h6-2ghf-2fp8

WordPress ARMember plugin <= 4.0.10 - Privilege Escalation vulnerability

MEDIUM 41

Improper Privilege Management vulnerability in Repute Infosystems ARMember allows Privilege Escalation.This issue affects ARMember: from n/a through 4.0.10.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00553 Published 2024-05-17 No fix listed CWE-269

TI-2024-21815 CVE-2024-32948 · GHSA-rjq8-9fp7-xvrf

WordPress ARMember – Membership Plugin plugin <= 4.0.28 - Broken Access Control vulnerability

MEDIUM 48

Missing Authorization vulnerability in Repute Infosystems ARMember.This issue affects ARMember: from n/a through 4.0.28.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00568 Published 2024-04-24 No fix listed CWE-862

TI-2024-19968 CVE-2024-30222 · GHSA-xv65-m527-x787

WordPress ARMember plugin <= 4.0.26 - PHP Object Injection vulnerability

MEDIUM 41

Deserialization of Untrusted Data vulnerability in Repute Infosystems ARMember.This issue affects ARMember: from n/a through 4.0.26.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00608 Published 2024-03-28 No fix listed CWE-502

TI-2024-19969 CVE-2024-30223 · GHSA-rgg3-prc9-59mw

WordPress ARMember plugin <= 4.0.26 - Unauthenticated PHP Object Injection vulnerability

MEDIUM 44

Deserialization of Untrusted Data vulnerability in Repute Infosystems ARMember.This issue affects ARMember: from n/a through 4.0.26.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00645 Published 2024-03-28 No fix listed CWE-502

TI-2024-18596 CVE-2024-27995 · GHSA-329g-rg28-m8qv

WordPress ARMember plugin <= 4.0.23 - Cross Site Scripting (XSS) vulnerability

LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Repute Infosystems ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup allows…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00334 Published 2024-03-21 No fix listed CWE-79

TI-2024-00893 CVE-2024-0969 · GHSA-3j3m-xc65-2xvg

ARMember <= 4.0.24 - Improper Access Control to Sensitive Information Exposure via REST API

LOW 31

The ARMember plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.21 via the REST API.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00482 Published 2024-02-05 No fix listed CWE-284

TI-2023-28628 CVE-2023-52200 · GHSA-gg47-6mxg-9jcv

WordPress ARMember Plugin <= 4.0.22 is vulnerable to Cross Site Request Forgery (CSRF) leading to PHP Object Injection

MEDIUM 42

Cross-Site Request Forgery (CSRF), Deserialization of Untrusted Data vulnerability in Repute Infosystems ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup.This issue affects ARM…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0027 Published 2024-01-08 No fix listed CWE-352

TI-2022-23154 CVE-2022-46808 · GHSA-6r44-696r-qvxx

WordPress ARMember Plugin <= 3.4.11 is vulnerable to SQL Injection

MEDIUM 50

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Repute Infosystems ARMember armember-membership allows SQL Injection.This issue affects ARMember: from n/a through 3.4…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00639 Published 2023-11-03 No fix listed CWE-89

TI-2023-16482 CVE-2023-33323 · GHSA-x6wh-4pxc-x3j2

WordPress ARMember Plugin <= 4.0.2 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Repute InfoSystems ARMember plugin <= 4.0.2 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00369 Published 2023-06-22 No fix listed CWE-79

TI-2022-23345 CVE-2022-47140 · GHSA-jxp8-fv2c-c5vh

WordPress ARMember Plugin <= 4.0.1 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Repute InfoSystems ARMember plugin <= 4.0.1 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00382 Published 2023-06-12 No fix listed CWE-79

Vulnerabilities

Filters