WordPress Plugin Vulnerabilities

Users Ultra Membership Plugin <= 1.5.58 - Unrestricted File Upload

Description

The Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin WordPress plugin was affected by an Unrestricted File Upload security vulnerability.

Affects Plugins

Plugin icon
users-ultra
Fixed in 1.5.59

References

CVE
CVE-2015-9402
URL
https://seclists.org/bugtraq/2015/Nov/93

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
92c47167-67a2-449a-a028-520b90e79a89

Timeline

Publicly Published
2015-11-17 (about 10 years ago)
Added
2015-11-18 (about 10 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2024-01-10
Title
Order Export & Order Import for WooCommerce < 2.4.4 - Shop Manager+ Arbitrary File Upload
Published
2014-08-01
Title
Deep-Blue 1.9.2 - Arbitrary File Upload
Published
2024-10-14
Title
WordPress Gallery Plugin – Limb Image Gallery <= 1.5.7 - Authenticated (Subscriber+) Arbitrary File Upload
Published
2025-02-17
Title
Everest Forms < 3.0.9.5 - Unauthenticated Arbitrary File Upload, Read, and Deletion
Published
2014-08-01
Title
Complete Gallery Manager 3.3.3 - Arbitrary File Upload