WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ultimate-member
Published
2019-05-13
Title
Ultimate Member < 2.0.46 - Multiple Vulnerabilities
Slug
ultimate-member
Published
2019-07-22
Title
Ultimate Member <= 2.0.53 - Cross-Site Scripting (XSS)
Slug
ultimate-member
Published
2018-05-10
Title
Ultimate Member < 2.0.4 - Multiple Issues
Slug
ultimate-member
Published
2019-06-24
Title
Ultimate Member < 2.0.52 - CSRF and Stored XSS issues
Slug
ultimate-member
Published
2018-04-23
Title
Ultimate Member < 2.0.7 - Multiple Cross-Site Request Forgery Issues
Slug
ultimate-member
Published
2018-10-06
Title
Ultimate Member < 2.0.28 - Multiple XSS
Slug
ultimate-member
Published
2018-02-14
Title
Ultimate Member < 2.0.4 - Multiple XSS
Slug
ultimate-member
Published
2018-07-03
Title
Ultimate Member < 2.0.18 - Authenticated Cross-Site Scripting (XSS)
Slug
ultimate-member
Published
2016-04-06
Title
Ultimate Member < 1.3.40 - Cross-Site Scripting (XSS)
Slug
ultimate-member
Published
2015-08-20
Title
Ultimate Member < 1.3.18 - Cross-Site Scripting (XSS)
Slug
ultimate-member
Published
2020-01-13
Title
Ultimate Member < 2.1.3 - Insecure Direct Object Reference (IDOR)
Slug
ultimate-member
Published
2020-08-12
Title
Ultimate Member < 2.1.7 - Unauthenticated Open Redirect
Slug
ultimate-member
Published
2020-11-09
Title
Ultimate Member < 2.1.12 - Unauthenticated Privilege Escalation via User Roles
Slug
ultimate-member
Published
2020-11-09
Title
Ultimate Member < 2.1.12 - Authenticated Privilege Escalation via Profile Update
Slug
ultimate-member
Published
2020-11-09
Title
Ultimate Member < 2.1.12 - Unauthenticated Privilege Escalation via User Meta
Slug
ultimate-member
Published
2021-05-07
Title
Ultimate Member < 2.1.20 - Authenticated Reflected Cross-Site Scripting (XSS)
Slug
ultimate-member
Published
2022-04-29
Title
Ultimate Member < 2.3.2 - Open Redirect
Slug
ultimate-member
Published
2022-06-02
Title
Ultimate Member < 2.4.0 - Subscriber+ Stored Cross-Site Scripting
Slug
ultimate-member
Published
2022-10-28
Title
Ultimate Member < 2.5.1 - Subscriber+ RCE
Slug
ultimate-member
Published
2022-10-28
Title
Ultimate Member < 2.5.1 - Admin+ RCE
Slug
ultimate-member
Published
2022-10-28
Title
Ultimate Member < 2.5.1 - Contributor+ LFI via Traversal
Slug
ultimate-member
Published
2022-10-28
Title
Ultimate Member < 2.5.1 - Admin+ LFI via Traversal
Slug
ultimate-member
Published
2023-06-29
Title
Ultimate Member < 2.6.7 - Unauthenticated Privilege Escalation
Slug
ultimate-member
Published
2023-05-30
Title
Ultimate Member < 2.6.1 - Form Duplication via CSRF
Slug
ultimate-member
Published
2024-02-23
Title
Ultimate Member 2.1.3 - 2.8.2 - Unauthenticated SQL Injection