Medium · 5.4 CVE-2022-47424 EUVD-2022-50186GHSA-v5fr-mh59-qcqr

WordPress ARMember plugin <= 4.0.5 - Cross Site Request Forgery (CSRF)

Published Nov 19, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Repute InfoSystems Product: ARMember Product: ARMember Premium

Description

Cross-Site Request Forgery (CSRF) vulnerability in Repute InfoSystems ARMember, Repute InfoSystems ARMember Premium allows Cross-Site Request Forgery.This issue affects ARMember: from n/a through 4.0.5; ARMember Premium: from n/a before 6.7.1.

Affected products

Vendor	Product	Affected	Fixed
Repute InfoSystems	ARMember	≤ 4.0.5	—
Repute InfoSystems	ARMember Premium	< 6.7.1	6.7.1

References

https://patchstack.com/database/vulnerability/armember-membership/wordpress-armember-plugin-4-0-5-cross-site-request-forgery-csrf?_s_id=cve vdb-entry