ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup

Уязвимости

• CVE-2024-30223без авторизации≤ 4.0.26

  WordPress ARMember plugin <= 4.0.26 - Unauthenticated PHP Object Injection vulnerability

  Критич. 9.8

• CVE-2023-52200без авторизации · нужен клик≤ 4.0.22

  WordPress ARMember Plugin <= 4.0.22 is vulnerable to Cross Site Request Forgery (CSRF) leading to PHP Object Injection

  Критич. 9.8

• CVE-2022-46808без авторизации · нужен клик≤ 3.4.11

  WordPress ARMember Plugin <= 3.4.11 is vulnerable to SQL Injection

  Критич. 9.8

• CVE-2024-32948без авторизации≤ 4.0.28

  WordPress ARMember – Membership Plugin plugin <= 4.0.28 - Broken Access Control vulnerability

  Критич. 9.1

• CVE-2022-47424без авторизации · нужен клик→ 6.7.1

  WordPress ARMember plugin <= 4.0.5 - Cross Site Request Forgery (CSRF)

  Высокий 8.8

• CVE-2023-3011без авторизации · нужен клик≤ 4.0.5

  ARMember <= 4.0.5 - Cross-Site Request Forgery

  Высокий 8.8

• CVE-2022-47425нужен вход≤ 3.4.10

  WordPress ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup plugin <= 3.4.10 - Broken Access Control

  Высокий 8.8

• CVE-2023-47837нужен вход≤ 4.0.10

  WordPress ARMember plugin <= 4.0.10 - Membership Plan Bypass vulnerability

  Высокий 8.8

• CVE-2023-51356нужен вход≤ 4.0.10

  WordPress ARMember plugin <= 4.0.10 - Privilege Escalation vulnerability

  Высокий 8.8

• CVE-2024-30222нужен вход≤ 4.0.26

  WordPress ARMember plugin <= 4.0.26 - PHP Object Injection vulnerability

  Высокий 8.8

• CVE-2026-7649без авторизации≤ 4.0.60

  ARMember <= 4.0.60 - Unauthenticated SQL Injection via 'orderby' Parameter

  Высокий 7.5

• CVE-2024-7703подписчик+≤ 4.0.37

  ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 4.0.37 - Authenticated (Subscriber+) Stored Cross-Site Scripting

  Средний 6.4

• CVE-2024-10681подписчик+≤ 4.0.51

  ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 4.0.51 - Authenticated (Subscriber+) Arbitrary Shortcode Executi

  Средний 6.3

• CVE-2024-4133без авторизации · нужен клик≤ 4.0.30

  ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 4.0.30 - Open Redirect

  Средний 6.1

• CVE-2022-47140без авторизации · нужен клик≤ 4.0.1

  WordPress ARMember Plugin <= 4.0.1 is vulnerable to Cross Site Scripting (XSS)

  Средний 6.1

• CVE-2024-27995высокие права≤ 4.0.23

  WordPress ARMember plugin <= 4.0.23 - Cross Site Scripting (XSS) vulnerability

  Средний 5.4

• CVE-2026-15302без авторизации≤ 4.0.27

  ARMember <= 4.0.27 - Directory Traversal via X-FILENAME

  Средний 5.3

• CVE-2024-0969без авторизации≤ 4.0.24

  ARMember <= 4.0.24 - Improper Access Control to Sensitive Information Exposure via REST API

  Средний 5.3

• CVE-2023-3996админ≤ 4.0.16

  ARMember Lite - Membership Plugin <= 4.0.16 - Authenticated (Administrator+) Stored Cross-Site Scripting

  Средний 4.8

• CVE-2022-47421админ

  WordPress ARMember (free) and ARMember (premium) plugins - vulnerable to Auth. Stored Cross Site Scripting (XSS)

  Средний 4.8

• CVE-2023-33323админ≤ 4.0.2

  WordPress ARMember Plugin <= 4.0.2 is vulnerable to Cross Site Scripting (XSS)

  Средний 4.8