CVE-2022-47425: WordPress ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup plugin <= 3.4.10 - Broken Access Control
Published Dec 9, 2025
·Updated
Missing Authorization vulnerability in Repute Infosystems ARMember allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ARMember: from n/a through 3.4.10.
Affected Software
3 affected components
Repute Infosystems ARMember<=3.4.10
wordpress/armember<=3.4.10
reputeinfosystems Armember Wordpress<3.4.11
Remediation
Information
Update the WordPress ARMember plugin to the latest available version (at least 3.4.11).
Event History
Dec 9, 2025
CVE Published
via MITRE·04:41 PM
Data Sourced
via MITRE·04:41 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-47425?
CVE-2022-47425 is rated as a medium severity vulnerability due to its potential impact on access control.
2
How do I fix CVE-2022-47425?
To fix CVE-2022-47425, ensure that access control configurations in ARMember are correctly set to restrict unauthorized access.
3
Who is affected by CVE-2022-47425?
CVE-2022-47425 affects users of Repute Infosystems ARMember versions up to 3.4.10.
4
What type of vulnerability is CVE-2022-47425?
CVE-2022-47425 is classified as a Missing Authorization vulnerability related to access control.
5
Can CVE-2022-47425 lead to data exposure?
Yes, CVE-2022-47425 can lead to unauthorized access to sensitive user information if not mitigated.