Armember – membership plugin, content restriction, member levels, user profile & user signup
This hub aggregates every CVE we track for Armember – membership plugin, content restriction, member levels, user profile & user signup. Use it to gauge the current risk picture and drill into individual advisories.
other
10
CVEs tracked
1
Critical
1
High
0
In CISA KEV
Severity distribution
MEDIUM8HIGH1CRITICAL1
Monthly trend
0
0
0
1
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
1
0
1
0
2024-092026-08
Latest CVEs
The 10 most recently published vulnerabilities affecting Armember – membership plugin, content restriction, member levels, user profile & user signup.
- CVE-2026-15302ARMember <= 4.0.27 - Directory Traversal via X-FILENAME5.3
- CVE-2026-7649ARMember <= 4.0.60 - Unauthenticated SQL Injection via 'orderby' Parameter7.5
- CVE-2024-10681ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 4.0.51 - Authenticated (Subscriber+) Arbitrary Shortcode Execution6.3
- CVE-2024-7703ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 4.0.37 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Upload6.4
- CVE-2024-4133ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 4.0.30 - Open Redirect6.1
- CVE-2024-27995WordPress ARMember plugin <= 4.0.23 - Cross Site Scripting (XSS) vulnerability5.9
- CVE-2024-0969ARMember <= 4.0.24 - Improper Access Control to Sensitive Information Exposure via REST API5.3
- CVE-2023-52200WordPress ARMember Plugin <= 4.0.22 is vulnerable to Cross Site Request Forgery (CSRF) leading to PHP Object Injection9.6
- CVE-2023-3996ARMember Lite - Membership Plugin <= 4.0.16 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4
- CVE-2023-3011ARMember <= 4.0.5 - Cross-Site Request Forgery6.5
Product normalization is registry-driven with AI assist and human review. How it works