PT-2026-45845 · Armember · Armember Premium – Membership Plugin

Published 2026-06-02 · Updated 2026-06-02 · CVE-2026-5074

NVD

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

The ARMember Premium plugin for WordPress is vulnerable to SQL Injection via the 'sSortDir 0' parameter of the get private content data AJAX action in all versions up to, and including, 7.3.1. This is due to insufficient sanitization of the user-supplied parameter which is concatenated directly into the ORDER BY clause of an SQL query without a whitelist check. This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Note: The vulnerability can only be exploited if the "User Private Content" addon is enabled, which is disabled by default..

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2026-5074

Affected Products

Armember Premium – Membership Plugin

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-5074 · Security Note
• https://codecanyon.net/item/armember-complete-wordpress-membership-system/17785056 · Note
• https://wordfence.com/threat-intel/vulnerabilities/id/76664f7a-b27d-4f2c-9314-92f4515c359f?source=cve · Note