Plugin icon

ARMember - Complete Membership Plugin

armember

Vulnerabilities:

7

Last Updated:

October 30, 2026

Active Installs:

n/a

Published
Title
Fixed in
CVSS
Published
2026-10-05
Title
ARMember Premium – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup < 7.9.1 - Unauthenticated SQL Injection
Fixed in
Fixed in 7.9.1
CVSS
7.5 (high)
Published
2026-06-30
Title
ARMember Premium – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup < 7.6 - Authenticated (Contributor+) PHP Object Injection
Fixed in
Fixed in 7.6
CVSS
6.6 (medium)
Published
2026-06-02
Title
ARMember Premium < 7.3.2 - Authenticated (Subscriber+) SQL Injection via 'sSortDir_0' Parameter
Fixed in
Fixed in 7.3.2
CVSS
6.5 (medium)
Published
2026-06-02
Title
ARMember Premium < 7.3.2 - Unauthenticated SQL Injection via 'order' Parameter
Fixed in
Fixed in 7.3.2
CVSS
7.5 (high)
Published
2026-06-02
Title
ARMember Premium < 7.3.2 - Insecure Password Reset Mechanism to Unauthenticated Privilege Escalation
Fixed in
Fixed in 7.3.2
CVSS
9.8 (critical)
Published
2024-06-21
Title
ARMember Premium < 6.7.1 - Cross-Site Request Forgery via multiple functions
Fixed in
Fixed in 6.7.1
CVSS
6.3 (medium)
Published
2022-12-01
Title
ARMember < 5.6 - Unauthenticated Privilege Escalation
Fixed in
Fixed in 5.6
CVSS
9.8 (critical)