Skip to content
OpenAdvisories
Critical · 9.6 CVE-2023-52200 EUVD-2023-56873GHSA-gg47-6mxg-9jcv

WordPress ARMember Plugin <= 4.0.22 is vulnerable to Cross Site Request Forgery (CSRF) leading to PHP Object Injection

Published Jan 8, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Repute InfoSystems Product: ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup

Description

Cross-Site Request Forgery (CSRF), Deserialization of Untrusted Data vulnerability in Repute Infosystems ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup.This issue affects ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup: n/a.

Affected products

VendorProductAffectedFixed
Repute Infosystems ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup ≤ 4.0.22 —

References