Reputeinfosystems Armember — known CVE vulnerabilities

Every CVE whose affected-product data names Reputeinfosystems Armember, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (14)

• CVE-2023-52200 — CVSS 9.6 (critical): Cross-Site Request Forgery (CSRF), Deserialization of Untrusted Data vulnerability in Repute Infosystems ARMember – Membership Plugin…
• CVE-2024-32948 — CVSS 9.1 (critical): Missing Authorization vulnerability in Repute Infosystems ARMember.This issue affects ARMember: from n/a through 4.0.28.
• CVE-2024-30223 — CVSS 9.0 (critical): Deserialization of Untrusted Data vulnerability in Repute Infosystems ARMember.This issue affects ARMember: from n/a through 4.0.26.
• CVE-2023-51356 — CVSS 8.8 (high): Improper Privilege Management vulnerability in Repute Infosystems ARMember allows Privilege Escalation.This issue affects ARMember: from…
• CVE-2024-30222 — CVSS 8.5 (high): Deserialization of Untrusted Data vulnerability in Repute Infosystems ARMember.This issue affects ARMember: from n/a through 4.0.26.
• CVE-2023-47837 — CVSS 8.3 (high): Improper Privilege Management vulnerability in Repute Infosystems ARMember allows Privilege Escalation.This issue affects ARMember: from…
• CVE-2022-46808 — CVSS 8.2 (high): Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Repute Infosystems ARMember…
• CVE-2022-47140 — CVSS 7.1 (high): Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Repute InfoSystems ARMember plugin <= 4.0.1 versions.
• CVE-2023-33323 — CVSS 5.9 (medium): Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Repute InfoSystems ARMember plugin <= 4.0.2 versions.
• CVE-2024-27995 — CVSS 5.9 (medium): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Repute Infosystems ARMember –…
• CVE-2022-47424 — CVSS 5.4 (medium): Cross-Site Request Forgery (CSRF) vulnerability in Repute InfoSystems ARMember, Repute InfoSystems ARMember Premium allows Cross-Site…
• CVE-2024-0969 — CVSS 5.3 (medium): The ARMember plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.21 via the REST…
• CVE-2023-39994 — CVSS 4.3 (medium): Missing Authorization vulnerability in Repute InfoSystems ARMember Premium allows Exploiting Incorrectly Configured Access Control Security…
• CVE-2022-47425 — CVSS 4.3 (medium): Missing Authorization vulnerability in Repute Infosystems ARMember allows Exploiting Incorrectly Configured Access Control Security…