The ARMember Premium plugin for WordPress versions up to 7.3.1 contains an insecure password reset mechanism that stores plaintext password reset keys in user metadata. This vulnerability allows attackers to potentially take over any user account, including administrators, when combined with SQL injection vulnerabilities (CVE-2026-5073, CVE-2026-5074). The plugin stores reset keys in both plaintext and hashed formats, creating a security weakness that can be exploited through the custom armrp reset action.