Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.5

ARMember Premium plugin for WordPress SQL Injection Risk via User Input

CVE-2026-5074 · published 5 months ago
Summary

The ARMember Premium plugin for WordPress has a security flaw that could allow attackers to access sensitive information from the database. This issue affects all versions up to 7.3.1 and can only be exploited if the 'User Private Content' addon is enabled. To stay safe, update the plugin to the latest version or disable the 'User Private Content' addon.

Original advisory text
The ARMember Premium plugin for WordPress is vulnerable to SQL Injection via the 'sSortDir_0' parameter of the `get_private_content_data` AJAX action in all versions up to, and including, 7.3.1. Th...
The ARMember Premium plugin for WordPress is vulnerable to SQL Injection via the 'sSortDir_0' parameter of the `get_private_content_data` AJAX action in all versions up to, and including, 7.3.1. This is due to insufficient sanitization of the user-supplied parameter which is concatenated directly into the ORDER BY clause of an SQL query without a whitelist check. This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Note: The vulnerability can only be exploited if the "User Private Content" addon is enabled, which is disabled by default..
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
6.5 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-89SQL Injection
Timeline
Published2 Jun 2026
Updated4 Nov 2026
First seen2 Jun 2026
Sources
CVE-2026-5074 · NVD
Track software like this
Free during beta