Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup 4.0.2

  • Severity: medium-risk
  • Status: Open
  • Publication: June 13, 2023

The ARMember plugin for WordPress has a security vulnerability that affects users with administrator-level access and above in versions up to, and including, 4.0.2. This vulnerability allows attackers to inject malicious web scripts into pages that will execute whenever someone visits the page. This vulnerability only applies to WordPress multi-site installations and installations where unfiltered_html has been disabled.

Detected in:

ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup open vulnerable versions: >= * <= 4.0.2

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.