Extension WordPress
Vulnérabilités ARMember Premium – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup
Cette page rassemble les failles publiées pour ARMember Premium – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de ARMember Premium – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup
7 fiches
ARMember Premium – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 7.0 – Authenticated (Contributor+) PHP Object Injection
The ARMember Premium – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 7.0 via deserialization of untrusted input. This makes…
*-7.0
Non indiqué
30/06/2026
ARMember Premium <= 7.3.1 – Insecure Password Reset Mechanism to Unauthenticated Privilege Escalation
The ARMember Premium plugin for WordPress is vulnerable to an insecure password reset mechanism in all versions up to, and including, 7.3.1. The plugin stores a plaintext copy of the password reset key in the `arm_reset_password_key` user meta…
*-7.3.1
7.3.2
02/06/2026
ARMember Premium <= 7.3.1 – Authenticated (Subscriber+) SQL Injection via 'sSortDir_0' Parameter
The ARMember Premium plugin for WordPress is vulnerable to SQL Injection via the 'sSortDir_0' parameter of the `get_private_content_data` AJAX action in all versions up to, and including, 7.3.1. This is due to insufficient sanitization of the user-supplied parameter…
*-7.3.1
7.3.2
02/06/2026
ARMember Premium <= 7.3.1 – Unauthenticated SQL Injection via 'order' Parameter
The ARMember Premium plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter of the 'arm_directory_paging_action' AJAX action in all versions up to, and including, 7.3.1. This is due to insufficient escaping on the user-supplied 'order'…
*-7.3.1
7.3.2
02/06/2026
ARMember Premium <= 6.7 – Cross-Site Request Forgery via multiple functions
The ARMember Premium plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 6.7. This is due to incorrectly implemented nonce validation function on multiple functions. This makes it possible for unauthenticated attackers…
*-6.7
6.7.1
21/06/2024
ARMember Premium <= 5.9.2 – Missing Authorization
The ARMember Premium plugin for WordPress is vulnerable to unauthorized access of data, modification of data, or loss of data due to a missing capability check on an unknown function in versions up to, and including, 5.9.2. This…
*-5.9.2
5.9.3
11/08/2023
ARMember Premium <= 5.5.1 – Privilege Escalation
The ARMember Premium plugin for WordPress is vulnerable to Authorization Bypass in versions up to, and including, 5.5.1. This makes it possible for unauthenticated attackers to elevate their own privileges with the potential to take over a site.
*-5.5.1
5.6
01/12/2022
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.