CVE-2022-47425: falha de média gravidade em Repute Infosystems ARMember
WordPress ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup plugin <= 3.4.10 - Broken Access Control
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 4.3epss 0.3%
Missing Authorization vulnerability in Repute Infosystems ARMember allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ARMember: from n/a through 3.4.10.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
Repute Infosystems · ARMemberCVEs relacionadas — Repute Infosystems ARMember
No mesmo produto, das mais perigosas para as menos.
CVE-2024-30223CRITICALWordPress ARMember plugin <= 4.0.26 - Unauthenticated PHP Object Injection vulnerabilityEPSS 0.6%CVE-2022-46808HIGHWordPress ARMember Plugin <= 3.4.11 is vulnerable to SQL InjectionEPSS 0.6%CVE-2024-30222HIGHWordPress ARMember plugin <= 4.0.26 - PHP Object Injection vulnerabilityEPSS 0.6%CVE-2024-32948CRITICALWordPress ARMember – Membership Plugin plugin <= 4.0.28 - Broken Access Control vulnerabilityEPSS 0.6%CVE-2023-51356HIGHWordPress ARMember plugin <= 4.0.10 - Privilege Escalation vulnerabilityEPSS 0.6%CVE-2023-47837HIGHWordPress ARMember plugin <= 4.0.10 - Membership Plan Bypass vulnerabilityEPSS 0.4%