CVE-2026-5076

The ARMember Premium plugin for WordPress is vulnerable to an insecure password reset mechanism in all versions up to, and including, 7.3.1. The plugin stores a plaintext copy of the password reset key in the `arm_reset_password_key` user meta field when a user requests a password reset. This is in addition to the hashed key that WordPress core stores securely in `wp_users.user_activation_key`. The plaintext key stored in `wp_usermeta` can be used with the plugin's custom `armrp` reset action to set a new password for any user. Combined with another vulnerability such as SQL Injection (CVE-2026-5073, CVE-2026-5074), this makes it possible for unauthenticated attackers to extract the plaintext reset key and take over any user account, including administrators.

• CWE-287

• https://codecanyon.net/item/armember-complete-wordpress-membership-system/17785056
• https://www.wordfence.com/threat-intel/vulnerabilities/id/6b15eca5-fd47-4f8f-8ade-3a90e0bfc110?source=cve

Published

Jun 2, 2026

Last Modified

Jul 21, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-50752A weakness in the certificate validation logic of the deprec…7.4
• CVE-2026-50755An issue in DayuanJiang next-ai-draw-io 0.4.13 allows a remo…9.8
• CVE-2026-50756An issue in DayuanJiang next-ai-draw-io 0.4.13 allows a remo…7.5
• CVE-2026-50757Directory Traversal vulnerability in DayuanJiang next-ai-dra…7.8
• CVE-2026-50758Cross Site Scripting vulnerability in DayuanJiang next-ai-dr…8.1
• CVE-2026-50759An issue in exo-explore exo 1.0.69 allows a remote attacker …7.5
• CVE-2026-50765A stored cross-site scripting (XSS) vulnerability in the pat…6.1
• CVE-2026-50766A stored cross-site scripting (XSS) vulnerability in the OPA…5.4
• CVE-2026-50767A stored cross-site scripting (XSS) vulnerability in the ite…5.4
• CVE-2026-5077The Total theme for WordPress is vulnerable to Stored Cross-…5.4
• CVE-2026-5078Impact: The morgan logging middleware's :remote-user token e…5.3
• CVE-2026-50782Jinher OA C6 contains an XML External Entity (XXE) injection…7.5