ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup vulnerabilities

2 known vulnerabilities in ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup from Reputeinfosystems. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  ARMember – Membership Plugin, Content…: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-7649May 2, 2026Reputeinfosystems

  The ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'orderby' parameter in all versions up to, and including, 4.0.60 due to insufficient e

• 8.8 High severity

  ARMember – Membership Plugin, Content…: Cross-Site Request Forgery

  CVE-2023-3011Jul 12, 2023Reputeinfosystems

  The ARMember plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.0.5. This is due to missing or incorrect nonce validation on the arm_check_user_cap function. This makes it possible for unauthenticated attackers