CVE Feed

Dashboard / CVE / CVE-2024-32948

CVE-2024-32948

Missing Authorization vulnerability in Repute Infosystems ARMember.This issue affects ARMember: from n/a through 4.0.28.

Published:Apr 24, 2024

Last Modified:Apr 28, 2026

EPS:Apr 24, 2024

EPSS Score:0.00143

CVSS Score:9.1

Affected Products

Vendor

Product

Action

Vendor

Armemberplugin

Product

Armember

Armemberplugin

Armember

Vendor

Reputeinfosystems

Product

Armember

Reputeinfosystems

Armember

Exploits

No exploit reference

Common Weakness Enumeration

CWE-862 Missing Authorization

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-665 Exploitation of Thunderbolt Protection Flaws

Related CVEs

CVE-2023-3996 (CVSS 4.4) — The ARMember Lite - Membership Plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin set…

CVE-2022-47421 (CVSS 5.9) — Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Repute InfoSystems ARMember (free), Repute I…

CVE-2023-3011 (CVSS 6.5) — The ARMember plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including…

CVE-2022-42888 (CVSS 9.8) — Unauth. Privilege Escalation vulnerability in ARMember premium plugin <= 5.5.1 on WordPress.…

CVE-2022-1903 (CVSS 8.1) — The ARMember WordPress plugin before 3.4.8 is vulnerable to account takeover (even the administrator) due to m…

References

https://patchstack.com/database/vulnerability/armember-membership/wordpress-armember-membership-plugin-plugin-4-0-28-broken-access-control-vulnerability?_s_id=cve

https://patchstack.com/database/vulnerability/armember-membership/wordpress-armember-membership-plugin-plugin-4-0-28-broken-access-control-vulnerability?_s_id=cve

Common Vulnerability Scoring System

Attack Vector

Network

Adjacent

Local

Physical

Privileges Required

None

Low

High

User Interaction

None

Required

Scope

Unchanged

Changed

Confidentiality

None

Low

High

Integrity

None

Low

High

Availability

None

Low

High