CVE Feed

Dashboard / CVE / CVE-2022-42888

CVE-2022-42888

Unauth. Privilege Escalation vulnerability in ARMember premium plugin <= 5.5.1 on WordPress.

Published:Dec 6, 2022

Last Modified:Apr 28, 2026

EPS:Dec 6, 2022

EPSS Score:0.00231

CVSS Score:9.8

Affected Products

Vendor

Product

Action

Vendor

Armemberplugin

Product

Armember

Armemberplugin

Armember

Exploits

No exploit reference

Common Weakness Enumeration

CWE-269 Improper Privilege Management

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-122 Privilege Abuse

CAPEC-233 Privilege Escalation

CAPEC-58 Restful Privilege Elevation

Related CVEs

CVE-2024-32948 (CVSS 9.1) — Missing Authorization vulnerability in Repute Infosystems ARMember.This issue affects ARMember: from n/a throu…

CVE-2023-3996 (CVSS 4.4) — The ARMember Lite - Membership Plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin set…

CVE-2022-47421 (CVSS 5.9) — Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Repute InfoSystems ARMember (free), Repute I…

CVE-2023-3011 (CVSS 6.5) — The ARMember plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including…

CVE-2022-1903 (CVSS 8.1) — The ARMember WordPress plugin before 3.4.8 is vulnerable to account takeover (even the administrator) due to m…

References

https://patchstack.com/database/vulnerability/armember/wordpress-armember-premium-plugin-5-5-1-unauth-privilege-escalation-vulnerability?_s_id=cve

https://patchstack.com/database/vulnerability/armember/wordpress-armember-premium-plugin-5-5-1-unauth-privilege-escalation-vulnerability?_s_id=cve

Common Vulnerability Scoring System

Attack Vector

Network

Adjacent

Local

Physical

Privileges Required

None

Low

High

User Interaction

None

Required

Scope

Unchanged

Changed

Confidentiality

None

Low

High

Integrity

None

Low

High

Availability

None

Low

High