https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T04:08:49.593956+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-287888 EUVD-2026-287888 2026-10-04T04:08:49.672399+00:00 EUVD-2026-287888 https://cve.radiocsirt.org/vuln/fkie_cve-2023-3996 fkie_cve-2023-3996 2026-10-04T04:08:49.672441+00:00

The ARMember Lite - Membership Plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 4.0.16 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.

 https://cve.radiocsirt.org/vuln/ghsa-364j-ch9m-hp4h GHSA-364j-ch9m-hp4h 2026-10-04T04:08:49.672480+00:00

The ARMember Lite - Membership Plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 4.0.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.

 https://cve.radiocsirt.org/vuln/gsd-2023-3996 gsd-2023-3996 2026-10-04T04:08:49.672500+00:00 gsd-2023-3996