CVE-2023-3011

Summary

CVE-2023-3011 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the ARMember plugin for WordPress. Versions up to and including 4.0.5 are at risk. The issue lies in the arm_check_user_cap function, which lacks proper nonce validation. As a result, an attacker can send a malicious request to a site administrator, causing them to unknowingly perform unauthorized actions, such as granting permissions or making changes to user accounts. This vulnerability can lead to significant security consequences if exploited.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.