ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup vulnerabilities
We track 1 vulnerability in ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on June 27, 2022.
1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score
Latest ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup vulnerabilities
- 8.1 High severity
ARMember – Membership Plugin, Content…: Missing Authorization
The ARMember WordPress plugin before 3.4.8 is vulnerable to account takeover (even the administrator) due to missing nonce and authorization checks in an AJAX action available to unauthenticated users, allowing them to change the password of arbitrary users by