CVE-2018-0587: Malicious File Upload
Published May 14, 2018
·Updated
Unrestricted file upload vulnerability in Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote authenticated users to upload arbitrary image files via unspecified vectors.
Affected Software
1 affected component
ultimatemember User Profile \& Membership Wordpress<2.0.4
Event History
May 14, 2018
CVE Published
via MITRE·01:00 PM
Data Sourced
via MITRE·01:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2018-0587?
CVE-2018-0587 is an unrestricted file upload vulnerability in the Ultimate Member plugin for WordPress.
2
What is the severity of CVE-2018-0587?
The severity of CVE-2018-0587 is medium with a score of 4.3.
3
How does CVE-2018-0587 affect the Ultimate Member plugin?
CVE-2018-0587 allows remote authenticated users to upload arbitrary image files via unspecified vectors.
4
Which version of the Ultimate Member plugin is affected by CVE-2018-0587?
The Ultimate Member plugin prior to version 2.0.4 for WordPress is affected by CVE-2018-0587.
5
How can I fix CVE-2018-0587?
To fix CVE-2018-0587, update the Ultimate Member plugin to version 2.0.4 or later.