https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T18:48:01.920363+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-1903 CVE-2022-1903 — ARMember < 3.4.8 - Unauthenticated Admin Account Takeover 2026-10-05T18:48:01.972089+00:00

Affected: Unknown ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup

The ARMember WordPress plugin before 3.4.8 is vulnerable to account takeover (even the administrator) due to missing nonce and authorization checks in an AJAX action available to unauthenticated users, allowing them to change the password of arbitrary users by knowing their username