CYBERHAWK / CVE / CVE-2026-5076
CVE-2026-5076
ARMember Premium WordPress Plugin
CRITICAL
CVSS 9.8
vibe
The flaw
Insecure password reset mechanism stores plaintext reset key in user meta.
What to do
Update to ARMember Premium version 7.3.2 or later