https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 15:25:41 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-324168 EUVD-2026-324168 https://cve.radiocsirt.org/vuln/euvd-2026-324168 https://cve.radiocsirt.org/vuln/fkie_cve-2026-5074 <p>The ARMember Premium plugin for WordPress is vulnerable to SQL Injection via the &#39;sSortDir_0&#39; parameter of the `get_private_content_data` AJAX action in all versions up to, and including, 7.3.1. This is due to insufficient sanitization of the user-supplied parameter which is concatenated directly into the ORDER BY clause of an SQL query without a whitelist check. This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Note: The vulnerability can only be exploited if the &#34;User Private Content&#34; addon is enabled, which is disabled by default..</p> <p>The ARMember Premium plugin for WordPress is vulnerable to SQL Injection via the &#39;sSortDir_0&#39; parameter of the `get_private_content_data` AJAX action in all versions up to, and including, 7.3.1. This is due to insufficient sanitization of the user-supplied parameter which is concatenated directly into the ORDER BY clause of an SQL query without a whitelist check. This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Note: The vulnerability can only be exploited if the &#34;User Private Content&#34; addon is enabled, which is disabled by default..</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-5074 https://cve.radiocsirt.org/vuln/ghsa-4jf4-cfj7-xxh5 <p>The ARMember Premium plugin for WordPress is vulnerable to SQL Injection via the &#39;sSortDir_0&#39; parameter of the `get_private_content_data` AJAX action in all versions up to, and including, 7.3.1. This is due to insufficient sanitization of the user-supplied parameter which is concatenated directly into the ORDER BY clause of an SQL query without a whitelist check. This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Note: The vulnerability can only be exploited if the &#34;User Private Content&#34; addon is enabled, which is disabled by default..</p> <p>The ARMember Premium plugin for WordPress is vulnerable to SQL Injection via the &#39;sSortDir_0&#39; parameter of the `get_private_content_data` AJAX action in all versions up to, and including, 7.3.1. This is due to insufficient sanitization of the user-supplied parameter which is concatenated directly into the ORDER BY clause of an SQL query without a whitelist check. This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Note: The vulnerability can only be exploited if the &#34;User Private Content&#34; addon is enabled, which is disabled by default..</p> https://cve.radiocsirt.org/vuln/ghsa-4jf4-cfj7-xxh5