Vulnerability · Published Jun 27, 2022 · Assigned by WPScan
CVE-2022-1903ARMember < 3.4.8 - Unauthenticated Admin Account Takeover
High 8.1
In plain English
A high-severity missing authorization in ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup from Unknown. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 8.7% (higher than 95% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei, public proof-of-concept code.
Official description
The ARMember WordPress plugin before 3.4.8 is vulnerable to account takeover (even the administrator) due to missing nonce and authorization checks in an AJAX action available to unauthenticated users, allowing them to change the password of arbitrary users by knowing their username
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Unknown | ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup | 3.4.8 – before 3.4.8 |
Weakness: CWE-862