Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-06-17
Armember - Cross-Site Scripting (XSS) (CVE-2022-47421)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Repute InfoSystems ARMember (free), Repute InfoSystems ARMember (premium) plugins.
PLUGIN
Armember
CVE-2022-47421
Risk Score
Threat Entry
Updated 2026-06-17
Armember - Cross-Site Request Forgery (CSRF) (CVE-2023-3011)
The ARMember plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.0.5. This is due to missing or incorrect nonce validation on the arm_check_user_cap function. This makes it possible for unauthenticated attackers to perform multiple unauthorized actions via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
PLUGIN
Armember
CVE-2023-3011
Risk Score
Threat Entry
Updated 2026-06-17
Armember - Cross-Site Scripting (XSS) (CVE-2023-33323)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Repute InfoSystems ARMember plugin
PLUGIN
Armember
CVE-2023-33323
Risk Score
Threat Entry
Updated 2026-06-17
Armember - Cross-Site Scripting (XSS) (CVE-2022-47140)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Repute InfoSystems ARMember plugin
PLUGIN
Armember
CVE-2022-47140
Risk Score
Threat Entry
Updated 2026-06-17
Armember - Privilege Escalation (CVE-2022-42888)
Unauth. Privilege Escalation vulnerability in ARMember premium plugin
PLUGIN
Armember
CVE-2022-42888
Risk Score
Threat Entry
Updated 2026-06-17
Armember - Security Vulnerability (CVE-2022-1903)
The ARMember WordPress plugin before 3.4.8 is vulnerable to account takeover (even the administrator) due to missing nonce and authorization checks in an AJAX action available to unauthenticated users, allowing them to change the password of arbitrary users by knowing their username
PLUGIN
Armember
CVE-2022-1903
Risk Score