Insecure Password Reset Mechanism in ARMember Premium Plugin for WordPress

CVE-2026-5076

What is CVE-2026-5076?

The ARMember Premium plugin for WordPress is compromised by an insecure password reset mechanism present in all versions up to and including 7.3.1. When a user requests a password reset, the plugin unintentionally stores the plaintext password reset key in the arm_reset_password_key user meta field. This compromises the user's security since the hashed key, which is stored securely in the wp_users.user_activation_key, does not provide adequate protection against unauthorized access. By exploiting this weakness, attackers could use SQL Injection vulnerabilities in conjunction with the insecure reset feature to extract the plaintext reset key and gain control over user accounts, potentially including those with administrative privileges.

References