WPScan
How it worksPricing
Vulnerabilities
WordPressPluginsThemesStatsSubmit vulnerabilities
For developers
StatusAPI detailsCLI scanner
Contact
search-icon
Choose type

Search

ADDED

TITLE

Published

2022-10-30

Title

Ultimate Member < 2.5.1 - Admin+ LFI via Traversal

Published

2022-10-30

Title

Ultimate Member < 2.5.1 - Contributor+ LFI via Traversal

Published

2022-10-30

Title

Ultimate Member < 2.5.1 - Admin+ RCE

Published

2022-10-30

Title

Ultimate Member < 2.5.1 - Subscriber+ RCE

Published

2022-06-02

Title

Ultimate Member < 2.4.0 - Subscriber+ Stored Cross-Site Scripting

Published

2022-04-30

Title

Ultimate Member < 2.3.2 - Open Redirect

Published

2021-05-07

Title

Ultimate Member < 2.1.20 - Authenticated Reflected Cross-Site Scripting (XSS)

Published

2020-11-09

Title

Ultimate Member < 2.1.12 - Unauthenticated Privilege Escalation via User Meta

Published

2020-11-09

Title

Ultimate Member < 2.1.12 - Authenticated Privilege Escalation via Profile Update

Published

2020-11-09

Title

Ultimate Member < 2.1.12 - Unauthenticated Privilege Escalation via User Roles

Published

2020-08-12

Title

Ultimate Member < 2.1.7 - Unauthenticated Open Redirect

Published

2020-02-24

Title

Ultimate Membership Pro < 8.7 - Cross-Site Request Forgery allowing Arbitrary Account Deletion and Creation

Published

2020-02-24

Title

Ultimate Membership Pro < 8.6.2 - Multiple CSRF Issues via AJAX Calls, Insufficient Filename Entropy

Published

2020-02-06

Title

Ultimate Membership Pro < 8.6.1 - Multiple Critical Vulnerabilities

Published

2020-01-22

Title

Ultimate Member < 2.1.3 - Insecure Direct Object Reference (IDOR)

Published

2019-08-13

Title

Ultimate Member <= 2.0.53 - Cross-Site Scripting (XSS)

Published

2019-07-11

Title

Ultimate Member < 2.0.52 - CSRF and Stored XSS issues

Published

2019-05-14

Title

Ultimate Member < 2.0.46 - Multiple Vulnerabilities

Published

2019-04-03

Title

Ultimate Member < 2.0.40 - Cross-Site Request Forgery (CSRF)

Published

2019-05-27

Title

Ultimate Membership Pro 7.4.2 <= 7.5 - Arbitrary media include

Published

2019-05-27

Title

Ultimate Membership Pro <= 7.5 - Arbitrary media upload

Published

2018-11-26

Title

Ultimate Member < 2.0.33 - Cross-Site Request Forgery (CSRF)

Published

2019-08-23

Title

Ultimate Member < 2.0.28 - Multiple XSS

Published

2018-08-13

Title

Ultimate Member < 2.0.22 - Authenticated Cross-Site Scripting (XSS)

Published

2018-08-09

Title

Ultimate Member < 2.0.22 - Unauthenticated Arbitrary File Upload