armember

Products

Exploited and recent CVEs

  • CVE-2026-5073 High 7.5 ARMember Premium <= 7.3.1 - Unauthenticated SQL Injection via 'order' Parameter 1.4%
  • CVE-2026-5074 Medium 6.5 ARMember Premium <= 7.3.1 - Authenticated (Subscriber+) SQL Injection via 'sSortDir_0' Parameter 0.3%
  • CVE-2026-5076 Critical 9.8 ARMember Premium <= 7.3.1 - Insecure Password Reset Mechanism to Unauthenticated Privilege Escalation 0.4%
  • CVE-2024-5596 Medium 6.3 ARMember Premium <= 6.7 - Cross-Site Request Forgery via multiple functions 0.2%