Input validation vulnerability in ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup 4.0.12

The ARMember Lite Membership Plugin for WordPress has an issue in some versions that makes it vulnerable to a type of attack called Stored Cross-Site Scripting. This type of attack happens when an attacker with administrator-level permissions injects malicious web scripts into pages. The malicious web scripts will then execute whenever a user visits the injected page. This only affects WordPress multi-site installations and installations where a certain type of content filter has been disabled.