PT-2026-45845 · WordPress · Armember Premium

H0Xilo · CVE-2026-5074 · Published 2026-06-02 · Updated 2026-06-03

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions ARMember Premium versions prior to 7.3.2

Description An SQL Injection issue exists in the ARMember Premium plugin for WordPress. The get private content data AJAX action fails to properly sanitize the sSortDir 0 parameter, which is concatenated directly into the ORDER BY clause of an SQL query without a whitelist check. This allows authenticated attackers with Subscriber-level access or higher to append additional SQL queries to extract sensitive information from the database. This issue is only exploitable if the User Private Content addon is enabled.

Recommendations Update to a version newer than 7.3.1. As a temporary mitigation, disable the User Private Content addon.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2026-5074

Affected Products

Armember Premium

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-5074 · Security Note
• https://codecanyon.net/item/armember-complete-wordpress-membership-system/17785056 · Note
• https://twitter.com/atomicedgeWAF/status/2062266833537814865 · Twitter Post
• https://wordfence.com/threat-intel/vulnerabilities/id/76664f7a-b27d-4f2c-9314-92f4515c359f?source=cve · Note
• https://twitter.com/VulmonFeeds/status/2061918355041161472 · Twitter Post