5.3
Moyenne
CVE-2026-15302 The ARMember plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.0.27…
Description
The ARMember plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.0.27 via the 'X-FILENAME' HTTP header. This makes it possible for unauthenticated attackers to upload and overwrite certain files (e.g., CSS) to directories outside the 'wp-content/uploads/armember' directory.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup 4.0 | premières → 4.0.27 | Pas de correctif indiqué |
Autres CVE de ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup
Les 8 CVE de ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup →
CVE-2026-7649
The ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup plugin for WordPress is…
7.5
Élevée
CVE-2024-10681
The The ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup plugin for…
6.3
Moyenne
CVE-2024-7703
The ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup plugin for WordPress is…
6.4
Moyenne
CVE-2024-4133
The ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup plugin for WordPress is…
6.1
Moyenne