Armember vulnerabilities
We track 3 vulnerabilities in Armember products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on November 10, 2026.
Latest Armember vulnerabilities
- 7.2 High severity
ARMember Premium – Membership Plugin, Content…: Improper Neutralization of Input During Web Page Generation
The ARMember Premium – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Registration Custom Field (Profile Cover) in all versions up to, and including, 7.8.1
- 9.8 Critical severity
ARMember Premium – Membership Plugin, Content…: Improper Authentication
The ARMember Premium plugin for WordPress is vulnerable to an insecure password reset mechanism in all versions up to, and including, 7.3.1. The plugin stores a plaintext copy of the password reset key in the `arm_reset_password_key` user meta field when a use
- 7.5 High severity
ARMember Premium – Membership Plugin, Content…: Improper Neutralization of Special Elements used in an SQL Command
The ARMember Premium plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter of the 'arm_directory_paging_action' AJAX action in all versions up to, and including, 7.3.1. This is due to insufficient escaping on the user-supplied 'order' a