PT-2026-45846 · WordPress · Armember Premium

H0Xilo · CVE-2026-5076 · Published 2026-06-02 · Updated 2026-06-24

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ARMember Premium versions prior to 7.3.1

Description The ARMember Premium plugin for WordPress contains an insecure password reset mechanism.

Recommendations Update to version 7.3.1.

Fix

LPE

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2026-5076

Affected Products

Armember Premium

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2026-5076 · Security Note
• https://twitter.com/VulmonFeeds/status/2061915795496542704 · Twitter Post
• https://twitter.com/atomicedgeWAF/status/2062297033403216375 · Twitter Post
• https://twitter.com/SecAlertsCo/status/2064234733391708610 · Twitter Post
• https://wordfence.com/threat-intel/vulnerabilities/id/6b15eca5-fd47-4f8f-8ade-3a90e0bfc110?source=cve · Note
• https://twitter.com/HugoValters/status/2063742799594295562 · Twitter Post
• https://codecanyon.net/item/armember-complete-wordpress-membership-system/17785056 · Note
• https://twitter.com/OrizonCyber/status/2061923325266231318 · Twitter Post
• https://twitter.com/integ_sec/status/2069795294389133662 · Twitter Post