WordPress Plugin Vulnerabilities

Users Ultra 1.3.37 - SQL Injection

Description

The Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin WordPress plugin was affected by a SQL Injection security vulnerability.

Affects Plugins

Plugin icon
users-ultra
Fixed in 1.3.38

References

URL
https://packetstormsecurity.com/files/#128473/

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Submitter
pvdl
Verified
No
WPVDB ID
8af16045-3b2d-44bf-ac6d-734e808dbbda

Timeline

Publicly Published
2014-10-07 (about 11 years ago)
Added
2014-10-07 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2019-04-28
Title
RSVPMaker < 6.2 - SQL Injection
Published
2025-03-31
Title
XV Random Quotes < 2.0.1 - Unauthenticated SQL Injection
Published
2025-06-11
Title
Smart Notification <= 10.3 - Unauthenticated SQL Injection
Published
2019-04-05
Title
Duplicate Page < 3.4 - Authenticated SQL Injection
Published
2020-04-28
Title
WP-Advanced-Search < 3.3.7 - Authenticated SQL Injection