CVE-2026-42417

reputeinfosystems ARMember Premium

Published 6 Oct 2026 · updated 6 Oct 2026 · Deferred

9.3 Critical · CVSS 3.1, patchstack.com

Description

Unauthenticated SQL Injection in ARMember Premium <= 7.8 versions.

References

patchstack.com/database/wordpress/plugin/armember/vulnerability/wordpress-armember-premium-plugin-7-8-sql-injection-vulnerability?_s_id=cve