CVE-2018-0588: Path Traversal
Published May 14, 2018
·Updated
Directory traversal vulnerability in the AJAX function of Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote attackers to read arbitrary files via unspecified vectors.
Affected Software
1 affected component
ultimatemember User Profile \& Membership Wordpress<2.0.4
Event History
May 14, 2018
CVE Published
via MITRE·01:00 PM
Data Sourced
via MITRE·01:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2018-0588.
2
What is the severity of CVE-2018-0588?
The severity of CVE-2018-0588 is high.
3
What is the affected software?
The affected software is Ultimate Member plugin prior to version 2.0.4 for WordPress.
4
How can the vulnerability be exploited?
The vulnerability can be exploited by remote attackers to read arbitrary files.
5
Is there a fix available for CVE-2018-0588?
Yes, the fix for CVE-2018-0588 is to update Ultimate Member plugin to version 2.0.4 or higher.