WordPress Plugin Vulnerabilities

Ultimate Member < 1.3.18 - Cross-Site Scripting (XSS)

Description

The Ultimate Member – User Profile, User Registration, Login & Membership Plugin WordPress plugin was affected by a Cross-Site Scripting (XSS) security vulnerability.

Affects Plugins

Plugin icon
ultimate-member
Fixed in 1.3.18

References

CVE
CVE-2015-9304

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
6.1 (medium)

Miscellaneous

Verified
No
WPVDB ID
aca537fc-7ef6-496d-9984-027289f3bc2d

Timeline

Publicly Published
2015-08-20 (about 10 years ago)
Added
2019-08-25 (about 6 years ago)
Last Updated
2020-10-02 (about 5 years ago)

Other

Published
Title
Published
2024-12-19
Title
isee-products-extractor < 2.1.4 - Reflected Cross-Site Scripting
Published
2023-03-17
Title
Bookly < 21.6 - Unauthenticated Stored XSS
Published
2017-08-21
Title
Liveforms < 3.4.0 - XSS
Published
2021-04-13
Title
ElementsKit and ElementsKit Pro < 2.2.0 - Contributor+ Stored XSS
Published
2023-10-18
Title
Smart Cookie Kit < 2.3.2 - Contributor+ Stored XSS