armember

2 results · Clear filters · Feed

• Medium 6.5
  CVE-2026-5074

  ARMember Premium <= 7.3.1 - Authenticated (Subscriber+) SQL Injection via 'sSortDir_0' Parameter

  The ARMember Premium plugin for WordPress is vulnerable to SQL Injection via the 'sSortDir_0' parameter of the `get_private_content_data` AJAX action in all versions up to, and including, 7.3.1. This is due to insufficient sanitization of the user-supplied pa…

  armember ARMember Premium – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup Web / CMS
  Jun 2, 2026
• Medium 6.3
  CVE-2024-5596

  ARMember Premium <= 6.7 - Cross-Site Request Forgery via multiple functions

  The ARMember Premium plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 6.7. This is due to incorrectly implemented nonce validation function on multiple functions. This makes it possible for unauthenticated att…

  armember ARMember Premium – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup Web / CMS
  Jun 22, 2024