VulnSocial

CVE-2026-5073Disclosure

LOWCVSS 7.5 · HIGH

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Patch affected systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

The ARMember Premium plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter of the 'arm_directory_paging_action' AJAX action in all versions up to, and including, 7.3.1. This is due to insufficient escaping on the user-supplied 'order' and 'orderby' parameters and the lack of sufficient preparation on the existing SQL query in the `arm_get_directory_members()` function. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.

Back to dashboard
2.3/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-89

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Public PoC is present in monitored signal
  • Patch or workaround signal is available
  • 11 mentions across 11 observed days
  • Momentum state: stable

What's happening

  • PoC mentioned or linked in 1 signal
  • Patch or workaround mentioned in 4 signals
  • Technical details provided in 4 signals
  • Disclosure: 5 classified signals
  • General: 3 classified signals
  • Peaked 10d ago at 1 mentions (2026-06-02); latest day: 1
  • 11 total mentions across 11 days

Deep dive

Activity timeline11 mentions / 11d
00111Mentions · 2026-06-02: 1Mentions · 2026-06-03: 1Mentions · 2026-06-09: 1Mentions · 2026-06-10: 1Mentions · 2026-06-19: 1Mentions · 2026-06-24: 1Mentions · 2026-06-26: 1Mentions · 2026-07-03: 1Mentions · 2026-07-06: 1Mentions · 2026-07-07: 1Mentions · 2026-07-23: 1PoC Mentioned / Linked · 2026-06-03: 1Patch / Workaround · 2026-06-19: 1Patch / Workaround · 2026-06-24: 1Patch / Workaround · 2026-07-07: 1Patch / Workaround · 2026-07-23: 1Technical Details · 2026-06-02: 1Technical Details · 2026-06-09: 1Technical Details · 2026-06-24: 1Technical Details · 2026-07-23: 106-0206-0306-0906-1006-1906-2406-2607-0307-0607-0707-23
Signal classification4 categories
Disclosure
545.5%
General
327.3%
Patch
218.2%
PoC
19.1%
Referenced assets6 URLs
Classification over time
DateTotalLabels
2026-06-021
General1
2026-06-031
PoC1
2026-06-091
Disclosure1
2026-06-101
General1
2026-06-191
Patch1
2026-06-241
Patch1
2026-06-261
General1
2026-07-031
Disclosure1
2026-07-061
Disclosure1
2026-07-071
Disclosure1
2026-07-231
Disclosure1
Full discourse11 posts
  • pdnuclei-bot@pdnuclei_bot
    Disclosure

    🚨 CVE-2026-5073 - critical 🚨 WordPress ARMember Premium <= 7.3.1 - Unauthenticated SQL Injection > The ARMember Premium plugin for WordPress is vulnerable to SQL Injection via the 'ord... 👾 https://cloud.projectdiscovery.io/library/CVE-2026-5073 @pdnuclei #NucleiTemplates ...

    Post summary

    The tweet announces CVE‑2026‑5073, an unauthenticated SQL injection in the ARMember Premium WordPress plugin (versions ≤7.3.1), providing key technical details but no PoC, exploit code, or patch information.

    00022212
    954 followersView on X
  • DFIR Lab@DFIR_Lab
    Disclosure

    🚨 HIGH: CVE-2026-5073 (CVSS 7.5) - SQL Injection in ARMember Premium WordPress plugin ≤7.3.1. Unauthenticated attackers can extract sensitive database info via 'order' parameter. Patch immediately! #CVE #Vulnerability #PatchNow https://t.co/uT8En7C9ih

    Post summary

    A high‑severity SQL injection (CVE‑2026‑5073) has been disclosed in ARMember Premium WordPress plugin (≤7.3.1). Users are urged to apply the available patch immediately to mitigate the vulnerability.

    0100054
    91 followersView on X
  • ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker
    Disclosure

    CVE-2026-5073 ARMember Premiumプラグイン（バージョン7.3.1まで）の脆弱性をわかりやすく解説｜影響範囲と対策まとめ https://www.cybernote.click/2026/07/02/cve-2026-5073-armember-premium731/ #IT #Security #cybersecurity

    Post summary

    The article explains the CVE-2026‑5073 vulnerability in the ARMember Premium plugin, outlines its impact, and provides mitigation steps.

    0000038
    208 followersView on X
  • ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker
    Disclosure

    CVE-2026-5073 ARMember Premiumプラグイン（バージョン7.3.1まで）の脆弱性をわかりやすく解説｜影響範囲と対策まとめ https://www.cybernote.click/2026/07/02/cve-2026-5073-armember-premium731/ #IT #Security #cybersecurity

    Post summary

    The article offers a clear explanation of CVE‑2026‑5073 affecting the ARMember Premium plugin, summarizing its impact and possible mitigations.

    0000037
    210 followersView on X
  • ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker
    Disclosure

    CVE-2026-5073 ARMember Premiumプラグイン（バージョン7.3.1まで）の脆弱性をわかりやすく解説｜影響範囲と対策まとめ https://www.cybernote.click/2026/07/02/cve-2026-5073-armember-premium731/ #IT #Security #cybersecurity

    Post summary

    The article announces and provides an explanation of CVE-2026-5073, focusing on impact scope and general countermeasure information, but no PoC, exploit code, or active exploitation details are presented.

    0000046
    209 followersView on X
  • ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker
    General

    CVE-2026-5073 ARMember Premiumプラグイン（バージョン7.3.1まで）の脆弱性をわかりやすく解説｜影響範囲と対策まとめ https://www.cybernote.click/2026/06/17/cve-2026-5073-armember-premium731/ #IT #Security #cybersecurity

    Post summary

    The snippet announces CVE‑2026‑5073, noting a brief explanation and a summary of impact and countermeasures, but does not provide specific exploit, patch, or technical details.

    0000040
    208 followersView on X
  • ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker
    Patch

    CVE-2026-5073 ARMember Premiumプラグイン（バージョン7.3.1まで）の脆弱性をわかりやすく解説｜影響範囲と対策まとめ https://www.cybernote.click/2026/06/17/cve-2026-5073-armember-premium731/ #IT #Security #cybersecurity

    Post summary

    The linked article explains CVE‑2026‑5073, providing technical details and summarizing countermeasures, but does not share PoC, exploit tools, or evidence of active exploitation.

    0000041
    208 followersView on X
  • ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker
    Patch

    CVE-2026-5073 ARMember Premiumプラグイン（バージョン7.3.1まで）の脆弱性をわかりやすく解説｜影響範囲と対策まとめ https://www.cybernote.click/2026/06/17/cve-2026-5073-armember-premium731/ #IT #Security #cybersecurity

    Post summary

    The post announces CVE-2026-5073 affecting the ARMember Premium plugin, explains the issue, and outlines mitigation steps including possible patches.

    0000042
    209 followersView on X
  • IntegSec@integ_sec
    General

    CVE-2026-5073: WordPress ARMember Premium Plugin SQL Injection Vulnerability - What It Means for Your Business and How to Respond https://hubs.li/Q04kVG9L0

    Post summary

    The provided text offers a headline and a link about CVE-2026-5073 but lacks concrete technical details, POCs, or mitigation information, making it a general mention.

    0000032
    31 followersView on X
  • Atomic Edge@atomicedgeWAF
    PoC

    https://atomicedge.io/cve-proof/cve-2026-5073-armember-version-7-3-1-high-vulnerability-proof-of-concept CVE-2026-5073 armember (CVSS Score 7.5) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge

    Post summary

    The post announces a proof of concept for CVE-2026‑5073 affecting armember 7.3.1 with a CVSS score of 7.5, but provides no exploit code, active usage, patch info, or technical details.

    0000035
    6 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2026-5073 SQL Injection in ARMember Premium Plugin for WordPress Versions Up to 7.3.1 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-5073

    Post summary

    The post cites CVE-2026-5073, describing a SQL injection flaw in ARMember Premium Plugin for WordPress up to version 7.3.1, but offers no PoC, exploit code, patch, or evidence of active exploitation.

    0000044
    4.0K followersView on X

Explore more

Back to dashboard