Armemberplugin Armember — known CVE vulnerabilities

Every CVE whose affected-product data names Armemberplugin Armember, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2022-42888 — CVSS 9.8 (critical): Unauth. Privilege Escalation vulnerability in ARMember premium plugin <= 5.5.1 on WordPress.
• CVE-2022-1903 — CVSS 8.1 (high): The ARMember WordPress plugin before 3.4.8 is vulnerable to account takeover (even the administrator) due to missing nonce and…
• CVE-2023-3011 — CVSS 6.5 (medium): The ARMember plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.0.5. This is due to…
• CVE-2022-47421 — CVSS 5.9 (medium): Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Repute InfoSystems ARMember (free), Repute InfoSystems ARMember (premium)…
• CVE-2023-3996 — CVSS 4.4 (medium): The ARMember Lite - Membership Plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and…