CVE-2022-47425: WordPress ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup plugin <= 3.4.10 - Broken Access Control
Missing Authorization vulnerability in Repute Infosystems ARMember allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ARMember: from n/a through 3.4.10.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress ARMember pluginto a version that resolves this vulnerability.Fixed in 3.4.11
Event History
Frequently Asked Questions
What is the severity of CVE-2022-47425?
CVE-2022-47425 is rated as a medium severity vulnerability due to its potential impact on access control.
How do I fix CVE-2022-47425?
To fix CVE-2022-47425, ensure that access control configurations in ARMember are correctly set to restrict unauthorized access.
Who is affected by CVE-2022-47425?
CVE-2022-47425 affects users of Repute Infosystems ARMember versions up to 3.4.10.
What type of vulnerability is CVE-2022-47425?
CVE-2022-47425 is classified as a Missing Authorization vulnerability related to access control.
Can CVE-2022-47425 lead to data exposure?
Yes, CVE-2022-47425 can lead to unauthorized access to sensitive user information if not mitigated.