Filter
AND
-Infinity
0
Ultimate MemberWordPress Ultimate Member plugin <= 2.10.3 - Arbitrary Function Call vulnerability
5.5
EPSS
0.04%
First published (updated )
Ultimate MemberUltimate Member <= 2.9.2 - Authenticated SQL Injection
6.5
First published (updated )
Ultimate MemberUltimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin <= 2.9.1 - Information Exposure
5.3
EPSS
0.05%
First published (updated )
Ultimate MemberForumWP – Forum & Discussion Board <= 2.1.2 - Reflected Cross-Site Scripting via url Parameter
6.1
First published (updated )
Ultimate MemberForumWP – Forum & Discussion Board <= 2.1.2 - Reflected Cross-Site Scripting
6.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Ultimate MemberUltimate Member <= 2.8.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Profile Picture Update
4.3
First published (updated )
Ultimate MemberUltimate Member <= 2.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
EPSS
0.05%
First published (updated )
Ultimate MemberUltimate Member <= 2.8.6 - Cross-Site Request Forgery to Membership Status Change
5.3
EPSS
0.09%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Ultimate MemberThe Ultimate Member plugin for WordPress is vulnerable to arbitrary redirects due to insufficient va…
5.4
First published (updated )
Ultimate MemberJobBoardWP – Job Board Listings and Submissions <= 1.0.7 Authenticated Stored Cross-Site Scripting
5.5
First published (updated )
Ultimate MemberUltimate Member < 2.1.20 - Authenticated Reflected Cross-Site Scripting (XSS)
5.4
First published (updated )
Ultimate MemberThe Ultimate Member plugin before 2.1.13 for WordPress mishandles hidden name="timestamp" fields in …
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Ultimate MemberMultiple Insecure Direct Object Reference vulnerabilities in includes/core/class-files.php in the Ul…
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Ultimate MemberAn issue was discovered in the Ultimate Member plugin 2.39 for WordPress. It allows unauthorized pro…
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Ultimate MemberUltimate Member plugin prior to version 2.0.4 for WordPress allows remote authenticated attackers to…
4.3
First published (updated )
Ultimate MemberUltimate Member plugin prior to version 2.0.4 for WordPress allows remote authenticated attackers to…
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.