Unknown Ultimate Multisite vulnerabilities

• unknown ultimate multisite Ultimate Multisite < 2.17.2 - Unauthenticated LFI via 'attributes' Parameter CVE-2026-107508 8.6 HighOctober 14, 2026
• unknown ultimate multisite Ultimate Multisite < 2.17.0 - Unauthenticated Authentication Bypass via 'email_address' Parameter CVE-2026-103646 9.8 CriticalOctober 8, 2026