Unknown Ultimate Member vulnerabilities

• ultimate member member, unknown ultimate member +1 more Ultimate Member < 2.13.1 - Unauthenticated Stored XSS via Profile Page Title CVE-2026-85680 8.8 HighSeptember 19, 2026
• ultimate member member, unknown ultimate member +1 more Ultimate Member < 2.13.0 - Unauthenticated Unapproved Comment Disclosure via Profile Activity CVE-2026-19251 5.3 MediumSeptember 2, 2026
• ultimate member member, unknown ultimate member +1 more Ultimate Member 2.6.7 - 2.12.1 - Unauthenticated Privilege Escalation via Role Field on Profile Forms CVE-2026-19423 8.1 HighAugust 28, 2026
• ultimate member member, unknown ultimate member +1 more Ultimate Member < 2.12.1 - Unauthenticated Privilege Escalation via Role Selection Field CVE-2026-12251 8.1 HighJuly 31, 2026
• ultimate member member, unknown ultimate member +1 more Ultimate Member < 2.12.0 - Subscriber+ Stored XSS via Custom Textarea Profile Fields CVE-2026-11766 8.0 HighJuly 6, 2026
• ultimate member member, ultimatemember ultimate member +1 more Ultimate Member < 2.6.7 - Unauthenticated Privilege Escalation CVE-2023-3460 Public exploit EPSS 72.3% 9.8 CriticalJuly 4, 2023