Threats tagged 'ghsa-c9fw-mvvp-j77h'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.5	CVE-2026-7649The ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup plugin for WordPress High7.52026-05-02GCVE DatabaseCVE-2026-7649 The ARMember WordPress plugin versions up to and including 4.0.60 contain a time-based blind SQL Injection vulnerability via the 'orderby' parameter. This flaw allows unauthenticated attackers to inject additional SQL queries due to insufficient input escaping and query preparation, potentially exposing sensitive database information. The vulnerability has a high severity rating with a CVSS score of 7.5. Report on CVE-2026-7649 Vulnerability CWE-89 #ghsa-c9fw-mvvp-j77h	GCVE Database	2026-05-02

Page 1 of 1