PT-2025-50093 · Repute Infosystems · Armember

Published 2025-12-09 · Updated 2025-12-14 · CVE-2022-47425

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ARMember versions through 3.4.10

Description A missing authorization issue exists in Repute Infosystems ARMember, allowing exploitation due to incorrectly configured access control security levels.

Recommendations Update ARMember to a version later than 3.4.10.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2022-47425

Affected Products

Armember

References · 5

• https://osv.dev/vulnerability/CVE-2022-47425 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-47425 · Security Note
• https://twitter.com/CVEnew/status/2000248694587965915 · Twitter Post
• https://vdp.patchstack.com/database/wordpress/plugin/armember-membership/vulnerability/wordpress-armember-membership-plugin-content-restriction-member-levels-user-profile-user-signup-plugin-3-4-10-broken-access-control?_s_id=cve · Note
• https://t.me/CVEtracker/39275 · Telegram Post