armember
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| ARMember Premium – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup | 4 | – | Jun 2, 2026 |
Exploited and recent CVEs
- CVE-2026-5073 ARMember Premium <= 7.3.1 - Unauthenticated SQL Injection via 'order' Parameter 1.4%
- CVE-2026-5074 ARMember Premium <= 7.3.1 - Authenticated (Subscriber+) SQL Injection via 'sSortDir_0' Parameter 0.3%
- CVE-2026-5076 ARMember Premium <= 7.3.1 - Insecure Password Reset Mechanism to Unauthenticated Privilege Escalation 0.4%
- CVE-2024-5596 ARMember Premium <= 6.7 - Cross-Site Request Forgery via multiple functions 0.2%