ARMember

Güvenlik açıkları

• CVE-2024-30223

  WordPress ARMember plugin <= 4.0.26 - Unauthenticated PHP Object Injection vulnerability

  Kritik 9.8

• CVE-2023-52200

  WordPress ARMember Plugin <= 4.0.22 is vulnerable to Cross Site Request Forgery (CSRF) leading to PHP Object Injection

  Kritik 9.8

• CVE-2022-46808

  WordPress ARMember Plugin <= 3.4.11 is vulnerable to SQL Injection

  Kritik 9.8

• CVE-2024-32948

  WordPress ARMember – Membership Plugin plugin <= 4.0.28 - Broken Access Control vulnerability

  Kritik 9.1

• CVE-2022-47425

  WordPress ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup plugin <= 3.4.10 - Broken Access Control

  Yüksek 8.8

• CVE-2022-47424→ 6.7.1

  WordPress ARMember plugin <= 4.0.5 - Cross Site Request Forgery (CSRF)

  Yüksek 8.8

• CVE-2023-47837

  WordPress ARMember plugin <= 4.0.10 - Membership Plan Bypass vulnerability

  Yüksek 8.8

• CVE-2023-51356

  WordPress ARMember plugin <= 4.0.10 - Privilege Escalation vulnerability

  Yüksek 8.8

• CVE-2024-30222

  WordPress ARMember plugin <= 4.0.26 - PHP Object Injection vulnerability

  Yüksek 8.8

• CVE-2023-3011

  ARMember <= 4.0.5 - Cross-Site Request Forgery

  Yüksek 8.8

• CVE-2026-7649

  ARMember <= 4.0.60 - Unauthenticated SQL Injection via 'orderby' Parameter

  Yüksek 7.5

• CVE-2024-7703

  ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 4.0.37 - Authenticated (Subscriber+) Stored Cross-Site Scripting

  Orta 6.4

• CVE-2024-10681

  ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 4.0.51 - Authenticated (Subscriber+) Arbitrary Shortcode Executi

  Orta 6.3

• CVE-2024-4133

  ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 4.0.30 - Open Redirect

  Orta 6.1

• CVE-2022-47140

  WordPress ARMember Plugin <= 4.0.1 is vulnerable to Cross Site Scripting (XSS)

  Orta 6.1

• CVE-2024-27995

  WordPress ARMember plugin <= 4.0.23 - Cross Site Scripting (XSS) vulnerability

  Orta 5.4

• CVE-2026-15302

  ARMember <= 4.0.27 - Directory Traversal via X-FILENAME

  Orta 5.3

• CVE-2024-0969

  ARMember <= 4.0.24 - Improper Access Control to Sensitive Information Exposure via REST API

  Orta 5.3

• CVE-2023-3996

  ARMember Lite - Membership Plugin <= 4.0.16 - Authenticated (Administrator+) Stored Cross-Site Scripting

  Orta 4.8

• CVE-2022-47421

  WordPress ARMember (free) and ARMember (premium) plugins - vulnerable to Auth. Stored Cross Site Scripting (XSS)

  Orta 4.8

• CVE-2023-33323

  WordPress ARMember Plugin <= 4.0.2 is vulnerable to Cross Site Scripting (XSS)

  Orta 4.8