ARMember Premium – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup vulnerabilities
3 known vulnerabilities in ARMember Premium – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup from Armember. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.2 High severity
ARMember Premium – Membership Plugin, Content…: Improper Neutralization of Input During Web Page Generation
The ARMember Premium – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Registration Custom Field (Profile Cover) in all versions up to, and including, 7.8.1
- 9.8 Critical severity
ARMember Premium – Membership Plugin, Content…: Improper Authentication
The ARMember Premium plugin for WordPress is vulnerable to an insecure password reset mechanism in all versions up to, and including, 7.3.1. The plugin stores a plaintext copy of the password reset key in the `arm_reset_password_key` user meta field when a use
- 7.5 High severity
ARMember Premium – Membership Plugin, Content…: Improper Neutralization of Special Elements used in an SQL Command
The ARMember Premium plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter of the 'arm_directory_paging_action' AJAX action in all versions up to, and including, 7.3.1. This is due to insufficient escaping on the user-supplied 'order' a