CVE Tools
Track your stack

Armember – Membership Plugin, Content Restriction, Member Levels, User Profile & User Signup

10 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Armember – Membership Plugin, Content Restriction, Member Levels, User Profile & User Signup. Use it to gauge the current risk picture and drill into individual advisories.

Armember – Membership Plugin, Content Restriction, Member Levels, User Profile & User Signup CVEs per month

Nov 2024 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Armember – Membership Plugin, Content Restriction, Member Levels, User Profile & User Signup CVEs per month
MonthCVEs
2024-110
2024-121
2025-010
2025-020
2025-030
2025-040
2025-050
2025-060
2025-070
2025-080
2025-090
2025-100
2025-110
2025-120
2026-010
2026-020
2026-030
2026-040
2026-051
2026-060
2026-071
2026-080
2026-090
2026-100

Severity

How the 10 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical110%
  • High110%
  • Medium880%

Latest CVEs

The 10 most recently published vulnerabilities affecting Armember – Membership Plugin, Content Restriction, Member Levels, User Profile & User Signup.

  1. CVE-2026-15302ARMember <= 4.0.27 - Directory Traversal via X-FILENAME5.3
  2. CVE-2026-7649ARMember <= 4.0.60 - Unauthenticated SQL Injection via 'orderby' Parameter7.5
  3. CVE-2024-10681ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 4.0.51 - Authenticated (Subscriber+) Arbitrary Shortcode Execution6.3
  4. CVE-2024-7703ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 4.0.37 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Upload6.4
  5. CVE-2024-4133ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 4.0.30 - Open Redirect6.1
  6. CVE-2024-27995WordPress ARMember plugin <= 4.0.23 - Cross Site Scripting (XSS) vulnerability5.9
  7. CVE-2024-0969ARMember <= 4.0.24 - Improper Access Control to Sensitive Information Exposure via REST API5.3
  8. CVE-2023-52200WordPress ARMember Plugin <= 4.0.22 is vulnerable to Cross Site Request Forgery (CSRF) leading to PHP Object Injection9.6
  9. CVE-2023-3996ARMember Lite - Membership Plugin <= 4.0.16 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4
  10. CVE-2023-3011ARMember <= 4.0.5 - Cross-Site Request Forgery6.5

Product grouping is registry-driven, with AI assist and human review. How it works