WordPress Plugin Vulnerabilities

2020-02-24

Ultimate Membership Pro < 8.6.2 - Multiple CSRF Issues via AJAX Calls, Insufficient Filename Entropy

Fixed in version 8.6.2

2020-02-24

Ultimate Membership Pro < 8.7 - Cross-Site Request Forgery allowing Arbitrary Account Deletion and Creation

Fixed in version 8.7

2020-02-06

Ultimate Membership Pro < 8.6.1 - Multiple Critical Vulnerabilities

Fixed in version 8.6.1

2019-02-26

Ultimate Membership Pro <= 7.5 - Arbitrary media upload

Fixed in version 7.6

2019-02-26

Ultimate Membership Pro 7.4.2 <= 7.5 - Arbitrary media include

Fixed in version 7.6