CVE-2026-5074

The ARMember Premium plugin for WordPress is vulnerable to SQL Injection via the 'sSortDir_0' parameter of the `get_private_content_data` AJAX action in all versions up to, and including, 7.3.1. This is due to insufficient sanitization of the user-supplied parameter which is concatenated directly into the ORDER BY clause of an SQL query without a whitelist check. This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Note: The vulnerability can only be exploited if the "User Private Content" addon is enabled, which is disabled by default..

• CWE-89

• https://codecanyon.net/item/armember-complete-wordpress-membership-system/17785056
• https://www.wordfence.com/threat-intel/vulnerabilities/id/76664f7a-b27d-4f2c-9314-92f4515c359f?source=cve

Published

Jun 2, 2026

Last Modified

Jul 21, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-50734Memory Allocation with Excessive Size Value vulnerability in…7.5
• CVE-2026-50735pglogical's apply worker does not sufficiently validate the …6.1
• CVE-2026-50736The pglogical queue mechanism, used to convey out-of-band co…9
• CVE-2026-50737When applying replicated changes for a row that is missing o…9
• CVE-2026-50738A use-after-free condition exists in pglogical's worker sign…7.7
• CVE-2026-50739A bypass for CVE‑2026‑34913 exists with proper ownership val…4.3
• CVE-2026-50740A missing sanitisation vulnerability of user input in the zo…5.4
• CVE-2026-50741Bypass to the fix for CVE-2026-34916. Variants of such vecto…8.8
• CVE-2026-50742A stored XSS vulnerabilities exists in the `maintenance-acl-…5.4
• CVE-2026-50743A CSRF vulnerability exists in the `zone-include.php` script…5.4
• CVE-2026-50744A bypass to the admin‑only restriction of the XML‑RPC API in…4.3
• CVE-2026-50745A missing sanitisation vulnerability exists with user input …6.1