CVE-2024-32948 - Vulnerability Details - OpenCVE

Missing Authorization vulnerability in Repute Infosystems ARMember.This issue affects ARMember: from n/a through 4.0.28.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00143.

Key SSVC decision points have not yet been added.

Vendors	Products
Reputeinfosystems	Armember

Configuration 1 [-]

cpe:2.3:a:reputeinfosystems:armember:*:*:*:*:*:wordpress:*:*

No data.

No data.

Advisories

Source	ID	Title
EUVD	EUVD-2024-30710	Missing Authorization vulnerability in Repute Infosystems ARMember.This issue affects ARMember: from n/a through 4.0.28.

Fixes

Solution

Update to 4.0.29 or a higher version.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://patchstack.com/database/vulnerability/armember-membership/wordpress-armember-membership-plugin-plugin-4-0-28-broken-access-control-vulnerability?_s_id=cve

History

Sun, 13 Jul 2025 13:45:00 +0000

Type	Values Removed	Values Added
Metrics	epss `{'score': 0.0014}`	epss `{'score': 0.00143}`

Mon, 09 Jun 2025 21:30:00 +0000

Type	Values Removed	Values Added
First Time appeared		Reputeinfosystems Reputeinfosystems armember
CPEs		cpe:2.3:a:reputeinfosystems:armember::::::wordpress::*
Vendors & Products		Reputeinfosystems Reputeinfosystems armember

MITRE

Status: PUBLISHED

Assigner: Patchstack

Published: 2024-04-24T07:03:17.452Z

Updated: 2024-08-02T02:27:52.125Z

Reserved: 2024-04-22T10:41:46.932Z

Link: CVE-2024-32948

Vulnrichment

Updated: 2024-08-02T02:27:52.125Z

NVD

Status : Analyzed

Published: 2024-04-24T07:15:48.320

Modified: 2025-06-09T21:06:58.697

Link: CVE-2024-32948

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-32948", "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", "state": "PUBLISHED", "assignerShortName": "Patchstack", "dateReserved": "2024-04-22T10:41:46.932Z", "datePublished": "2024-04-24T07:03:17.452Z", "dateUpdated": "2024-08-02T02:27:52.125Z"}, "containers": {"cna": {"affected": [{"collectionURL": "https://wordpress.org/plugins", "defaultStatus": "unaffected", "packageName": "armember-membership", "product": "ARMember", "vendor": "Repute Infosystems", "versions": [{"changes": [{"at": "4.0.29", "status": "unaffected"}], "lessThanOrEqual": "4.0.28", "status": "affected", "version": "n/a", "versionType": "custom"}]}], "credits": [{"lang": "en", "type": "finder", "user": "00000000-0000-4000-9000-000000000000", "value": "Kursat Cetin (Patchstack)"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Missing Authorization vulnerability in Repute Infosystems ARMember.<p>This issue affects ARMember: from n/a through 4.0.28.</p>"}], "value": "Missing Authorization vulnerability in Repute Infosystems ARMember.This issue affects ARMember: from n/a through 4.0.28.\n\n"}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-862", "description": "CWE-862 Missing Authorization", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "21595511-bba5-4825-b968-b78d1f9984a3", "shortName": "Patchstack", "dateUpdated": "2024-04-24T07:03:17.452Z"}, "references": [{"tags": ["vdb-entry"], "url": "https://patchstack.com/database/vulnerability/armember-membership/wordpress-armember-membership-plugin-plugin-4-0-28-broken-access-control-vulnerability?_s_id=cve"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Update to 4.0.29 or a higher version."}], "value": "Update to 4.0.29 or a higher version."}], "source": {"discovery": "EXTERNAL"}, "title": "WordPress ARMember \u2013 Membership Plugin plugin <= 4.0.28 - Broken Access Control vulnerability", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-32948", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-04-24T13:19:01.109001Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:armemberplugin:armember:*:*:*:*:*:wordpress:*:*"], "vendor": "armemberplugin", "product": "armember", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "4.0.28"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T17:50:47.173Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T02:27:52.125Z"}, "title": "CVE Program Container", "references": [{"tags": ["vdb-entry", "x_transferred"], "url": "https://patchstack.com/database/vulnerability/armember-membership/wordpress-armember-membership-plugin-plugin-4-0-28-broken-access-control-vulnerability?_s_id=cve"}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://patchstack.com/database/vulnerability/armember-membership/wordpress-armember-membership-plugin-plugin-4-0-28-broken-access-control-vulnerability?_s_id=cve", "tags": ["vdb-entry", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T02:27:52.125Z"}}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-32948", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-04-24T13:19:01.109001Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:armemberplugin:armember:*:*:*:*:*:wordpress:*:*"], "vendor": "armemberplugin", "product": "armember", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "4.0.28"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-04-24T13:18:11.546Z"}, "title": "CISA ADP Vulnrichment"}], "cna": {"title": "WordPress ARMember \u2013 Membership Plugin plugin <= 4.0.28 - Broken Access Control vulnerability", "source": {"discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "finder", "user": "00000000-0000-4000-9000-000000000000", "value": "Kursat Cetin (Patchstack)"}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.1, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Repute Infosystems", "product": "ARMember", "versions": [{"status": "affected", "changes": [{"at": "4.0.29", "status": "unaffected"}], "version": "n/a", "versionType": "custom", "lessThanOrEqual": "4.0.28"}], "packageName": "armember-membership", "collectionURL": "https://wordpress.org/plugins", "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "Update to 4.0.29 or a higher version.", "supportingMedia": [{"type": "text/html", "value": "Update to 4.0.29 or a higher version.", "base64": false}]}], "references": [{"url": "https://patchstack.com/database/vulnerability/armember-membership/wordpress-armember-membership-plugin-plugin-4-0-28-broken-access-control-vulnerability?_s_id=cve", "tags": ["vdb-entry"]}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "Missing Authorization vulnerability in Repute Infosystems ARMember.This issue affects ARMember: from n/a through 4.0.28.\n\n", "supportingMedia": [{"type": "text/html", "value": "Missing Authorization vulnerability in Repute Infosystems ARMember.<p>This issue affects ARMember: from n/a through 4.0.28.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-862", "description": "CWE-862 Missing Authorization"}]}], "providerMetadata": {"orgId": "21595511-bba5-4825-b968-b78d1f9984a3", "shortName": "Patchstack", "dateUpdated": "2024-04-24T07:03:17.452Z"}}}, "cveMetadata": {"cveId": "CVE-2024-32948", "state": "PUBLISHED", "dateUpdated": "2024-08-02T02:27:52.125Z", "dateReserved": "2024-04-22T10:41:46.932Z", "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", "datePublished": "2024-04-24T07:03:17.452Z", "assignerShortName": "Patchstack"}, "dataVersion": "5.1"}