Skip to contentUltimatemember vulnerabilities
Newest
- ultimatemember ultimate memberThe ultimate-member plugin before 2.0.52 for WordPress has XSS during an account upgrade.CVE-2019-149475.4 Medium
- ultimatemember ultimate memberThe ultimate-member plugin before 2.0.4 for WordPress has XSS.CVE-2018-209656.1 Medium
- ultimatemember ultimate memberThe ultimate-member plugin before 1.3.40 for WordPress has XSS on the login form.CVE-2016-108726.1 Medium
- ultimatemember ultimate memberThe ultimate-member plugin before 1.3.18 for WordPress has XSS via text input.CVE-2015-93046.1 Medium
- ultimatemember ultimate memberAn issue was discovered in the Ultimate Member plugin 2.39 for WordPress. It allows unauthorized...CVE-2019-102714.3 Medium
- ultimatemember ultimate memberAn arbitrary password reset issue was discovered in the Ultimate Member plugin 2.39 for WordPress...CVE-2019-102708.8 High
- ultimatemember ultimate memberA CSRF vulnerability in a logged-in user's profile edit form in the Ultimate Member plugin before...CVE-2019-106738.8 High
- ultimatemember ultimate memberMultiple cross-site scripting (XSS) vulnerabilities in includes/core/um-actions-login.php in the ...CVE-2018-178666.1 Medium
- ultimatemember ultimate memberThe Ultimate Member (aka ultimatemember) plugin before 2.0.18 for WordPress has XSS via the wp...CVE-2018-131366.1 Medium
- ultimate member member, ultimatemember user profile \& membership +1 moreUltimate Member plugin prior to version 2.0.4 for WordPress allows remote authenticated attackers...CVE-2018-05904.3 Medium
- ultimate member member, ultimatemember user profile \& membership +1 moreUltimate Member plugin prior to version 2.0.4 for WordPress allows remote authenticated attackers...CVE-2018-05894.3 Medium
- ultimate member member, ultimatemember user profile \& membership +1 moreDirectory traversal vulnerability in the AJAX function of Ultimate Member plugin prior to version...CVE-2018-05887.5 High
- ultimate member member, ultimatemember user profile \& membership +1 moreUnrestricted file upload vulnerability in Ultimate Member plugin prior to version 2.0.4 for...CVE-2018-05874.3 Medium
- ultimate member member, ultimatemember user profile \& membership +1 moreDirectory traversal vulnerability in the shortcodes function of Ultimate Member plugin prior to...CVE-2018-05864.3 Medium
- ultimate member member, ultimatemember ultimate member +1 moreCross-site scripting vulnerability in Ultimate Member plugin prior to version 2.0.4 for WordPress...CVE-2018-05855.4 Medium
- ultimatemember user profile \& membershipAuthenticated Cross site Scripting exists in the User Profile & Membership plugin before 2.0.11...CVE-2018-102344.8 Medium
- ultimatemember user profile \& membershipThe User Profile & Membership plugin before 2.0.7 for WordPress has no mitigations implemented...CVE-2018-102338.8 High
- ultimatemember ultimate membercore/lib/upload/um-file-upload.php in the UltimateMember plugin 2.0 for WordPress has a cross...CVE-2018-69446.1 Medium
- ultimatemembercore/lib/upload/um-image-upload.php in the UltimateMember plugin 2.0 for WordPress has a cross...CVE-2018-69436.1 Medium
- ultimatemember ultimate memberCross-site scripting (XSS) vulnerability in the Ultimate Member WordPress plugin before 1.3.29...CVE-2015-83546.1 Medium