Reputeinfosystems ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup

• CVE-2026-15302 Medium 5.3 ARMember <= 4.0.27 - Directory Traversal via X-FILENAME 0.7%
• CVE-2026-7649 High 7.5 ARMember <= 4.0.60 - Unauthenticated SQL Injection via 'orderby' Parameter 0.3%
• CVE-2024-10681 Medium 6.3 ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 4.0.51 - Authenticated (Subscriber+) Arbitrary Shortcode Execution 0.4%
• CVE-2024-7703 Medium 6.4 ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 4.0.37 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Upload 1.1%
• CVE-2024-4133 Medium 6.1 ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 4.0.30 - Open Redirect 0.5%
• CVE-2024-0969 Medium 5.3 ARMember <= 4.0.24 - Improper Access Control to Sensitive Information Exposure via REST API 0.5%
• CVE-2023-3996 Medium 4.4 ARMember Lite - Membership Plugin <= 4.0.16 - Authenticated (Administrator+) Stored Cross-Site Scripting 0.6%
• CVE-2023-3011 Medium 6.5 ARMember <= 4.0.5 - Cross-Site Request Forgery 0.3%