armemberplugin records

5 published records for vendor armemberplugin.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

5 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2022-1903Proof of concept	ARMember < 3.4.8 - Unauthenticated Admin Account Takeoverarmemberplugin · armember · CWE-862 Pre-auth Broken access control (IDOR)	High8.1	—	8.7%	Jun 27, 2022
35Monitor	CVE-2022-42888No exploit	WordPress ARMember Plugin <= 5.5.1 is vulnerable to Privilege Escalationarmemberplugin · armember · CWE-269	High8.8	—	0.7%	Dec 6, 2022
35Monitor	CVE-2023-3011No exploit	ARMember <= 4.0.5 - Cross-Site Request Forgeryarmemberplugin · armember · CWE-352 Pre-auth CSRF	High8.8	—	0.3%	Jul 12, 2023
19Monitor	CVE-2023-3996No exploit	ARMember Lite - Membership Plugin <= 4.0.16 - Authenticated (Administrator+) Stored Cross-Site Scriptingarmemberplugin · armember · CWE-79 XSS	Medium4.8	—	0.5%	Oct 20, 2023
19Monitor	CVE-2022-47421No exploit	WordPress ARMember (free) and ARMember (premium) plugins - vulnerable to Auth. Stored Cross Site Scripting (XSS)armemberplugin · armember · CWE-79 XSS	Medium4.8	—	0.4%	Jul 18, 2023

CVE-2022-1903
35Monitor
ARMember < 3.4.8 - Unauthenticated Admin Account Takeover
HighCVSS 8.1Proof of conceptEPSS 9%
- Pre-auth
- Broken access control (IDOR)
armemberplugin · armemberJun 27, 2022
CVE-2022-42888
35Monitor
WordPress ARMember Plugin <= 5.5.1 is vulnerable to Privilege Escalation
HighCVSS 8.8No exploitEPSS 1%
armemberplugin · armemberDec 6, 2022
CVE-2023-3011
35Monitor
ARMember <= 4.0.5 - Cross-Site Request Forgery
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
armemberplugin · armemberJul 12, 2023
CVE-2023-3996
19Monitor
ARMember Lite - Membership Plugin <= 4.0.16 - Authenticated (Administrator+) Stored Cross-Site Scripting
MediumCVSS 4.8No exploitEPSS 0%
- XSS
armemberplugin · armemberOct 20, 2023
CVE-2022-47421
19Monitor
WordPress ARMember (free) and ARMember (premium) plugins - vulnerable to Auth. Stored Cross Site Scripting (XSS)
MediumCVSS 4.8No exploitEPSS 0%
- XSS
armemberplugin · armemberJul 18, 2023