CVE-2018-0590: Medium severity ultimate member vulnerability
Published May 14, 2018
·Updated
Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote authenticated attackers to bypass access restriction to modify the other users profiles via unspecified vectors.
Affected Software
1 affected component
ultimatemember User Profile \& Membership Wordpress<2.0.4
Event History
May 14, 2018
CVE Published
via MITRE·01:00 PM
Data Sourced
via MITRE·01:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2018-0590.
2
What is the title of the vulnerability?
The title of the vulnerability is 'Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote authenticated attackers to...'
3
What is the severity of CVE-2018-0590?
The severity of CVE-2018-0590 is medium with a rating of 4.3.
4
How can I fix CVE-2018-0590?
To fix CVE-2018-0590, update the Ultimate Member plugin to version 2.0.4 or later.
5
Where can I find more information about CVE-2018-0590?
You can find more information about CVE-2018-0590 at the following references: http://jvn.jp/en/jp/JVN28804532/index.html, https://wordpress.org/plugins/ultimate-member/#developers, https://wpvulndb.com/vulnerabilities/9608.