CVE-2024-30223: WordPress ARMember plugin <= 4.0.26 - Unauthenticated PHP Object Injection vulnerability
Published Mar 28, 2024
·Updated
Deserialization of Untrusted Data vulnerability in Repute Infosystems ARMember.This issue affects ARMember: from n/a through 4.0.26.
Affected Software
3 affected components
Repute Infosystems ARMember<=4.0.26
WordPress ARMember<=4.0.26
reputeinfosystems Armember Wordpress<4.0.27
Remediation
Information
Update to 4.0.27 or a higher version.
Event History
Mar 28, 2024
CVE Published
via MITRE·05:04 AM
Data Sourced
via MITRE·05:04 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·05:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-30223?
CVE-2024-30223 has a medium severity rating due to its potential for exploitation via deserialization of untrusted data.
2
How do I fix CVE-2024-30223?
To fix CVE-2024-30223, update Repute Infosystems ARMember to the latest version beyond 4.0.26.
3
Which versions of ARMember are affected by CVE-2024-30223?
CVE-2024-30223 affects all versions of ARMember from n/a through 4.0.26.
4
What type of vulnerability is CVE-2024-30223?
CVE-2024-30223 is a vulnerability involving deserialization of untrusted data.
5
Can CVE-2024-30223 be exploited remotely?
Yes, CVE-2024-30223 can potentially be exploited remotely if proper security measures are not in place.