It doesn't matter if the wifi is encrypted or not. All that matters is that you share the network with an attacker. You can ARP poison just fine, encrypted or open, wifi or wired.
(Yes, I am indeed being pedantic on purpose to prove a point. I offer this parenthetical to you in place of an apology)