Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo

WordPress Plugin

WP Plugin Ultimate Member

A WordPress plugin is a piece of software that plugs into your WordPress site. Plugins can add new functionality or extend existing functionality on your site allowing you to create virtually any kind of website from ecommerce stores to portfolios to directory sites.

Official Site:

https://wordpress.org/plugins/ultimate-member

Severity Summary:

Critical: 7 High: 15 Medium: 24 Low: 1 Information: 3
Reference
Title
Severity
CVE-2021-24306
WordPress Plugin Ultimate Member-User Profile Registration Login Member Directory Content Restriction Membership Cross-Site Scripting
Medium
No CVE number
WordPress Plugin Ultimate Member-User Profile Registration Login Member Directory Content Restriction Membership Security Bypass
Medium
No CVE number
WordPress Plugin Ultimate Member-User Profile Registration Login Member Directory Content Restriction Membership Arbitrary File Deletion
Medium
No CVE number
WordPress Plugin Ultimate Member-User Profile Registration Login Member Directory Content Restriction Membership Open Redirect
Medium
No CVE number
WordPress Plugin Ultimate Member-User Profile Registration Login Member Directory Content Restriction Membership Cross-Site Scripting
Medium
CVE-2020-6859
WordPress Plugin Ultimate Member-User Profile Registration Login Member Directory Content Restriction Membership Security Bypass
Medium
CVE-2019-14947
WordPress Plugin Ultimate Member-User Profile Registration Login Member Directory Content Restriction Membership Cross-Site Scripting
Medium
CVE-2018-10233
WordPress Plugin Ultimate Member-User Profile Registration Login Member Directory Content Restriction Membership Cross-Site Request Forgery
Medium
CVE-2019-14946
WordPress Plugin Ultimate Member-User Profile Registration Login Member Directory Content Restriction Membership Cross-Site Scripting
Medium
No CVE number
WordPress Plugin Ultimate Member-User Profile Registration Login Member Directory Content Restriction Membership Privilege Escalation
Medium
No CVE number
WordPress Plugin Ultimate Member-User Profile Registration Login Member Directory Content Restriction Membership Multiple Vulnerabilities
Medium
CVE-2018-10234
WordPress Plugin Ultimate Member-User Profile Registration Login Member Directory Content Restriction Membership Cross-Site Scripting
Medium
CVE-2018-13136
WordPress Plugin Ultimate Member-User Profile Registration Login Member Directory Content Restriction Membership Cross-Site Scripting
Medium
No CVE number
WordPress Plugin Ultimate Member-User Profile Registration Login Member Directory Content Restriction Membership Open Redirect
Medium
CVE-2018-17866
WordPress Plugin Ultimate Member-User Profile Registration Login Member Directory Content Restriction Membership Multiple Cross-Site Scripting Vulnerabilities
Medium
No CVE number
WordPress Plugin Ultimate Member-User Profile Registration Login Member Directory Content Restriction Membership Cross-Site Scripting
Medium
CVE-2022-1209
WordPress Plugin Ultimate Member-User Profile Registration Login Member Directory Content Restriction Membership Open Redirect
Low
No CVE number
WordPress Plugin Ultimate Member-User Profile Registration Login Member Directory Content Restriction Membership Unspecified Vulnerability
Information
CVE-2020-36170
WordPress Plugin Ultimate Member-User Profile Registration Login Member Directory Content Restriction Membership Unspecified Vulnerability
Information
No CVE number
WordPress Plugin Ultimate Member-User Profile Registration Login Member Directory Content Restriction Membership Unspecified Vulnerability
Information