dbcve.org
Vulnerability index

Browse CVEs

43 matching
Cards Compact
Filters 1 Clear all
Severity

Filters apply as you choose them.

Top technology Linux 13140 Google 12530 Microsoft 12379 Oracle 6737 Apple 6692 Adobe 6387 Ibm 6330 Cisco 5757 Debian 3919 Mozilla 2895 Apache 2864 Redhat 2592
Ultimate Member MEDIUM 6.1
CVE-2018-20965

The ultimate-member plugin before 2.0.4 for WordPress has XSS.

Fix: 2.0.4+
Fix from $1,600 2019-08-12
Ultimate Member MEDIUM 6.1
CVE-2015-9304

The ultimate-member plugin before 1.3.18 for WordPress has XSS via text input.

Fix: 1.3.18+
Fix from $1,600 2019-08-12
Ultimate Member MEDIUM 6.1
CVE-2016-10872

The ultimate-member plugin before 1.3.40 for WordPress has XSS on the login form.

Fix: 1.3.40+
Fix from $1,600 2019-08-12
Ultimate Member HIGH 8.8
CVE-2019-10270

An arbitrary password reset issue was discovered in the Ultimate Member plugin 2.39 for WordPress. It is possible (due to lack of verification and co…

Fix: 2.0.40+
Fix from $1,950 2019-06-21
Ultimate Member HIGH 8.8
CVE-2019-10673

A CSRF vulnerability in a logged-in user's profile edit form in the Ultimate Member plugin before 2.0.40 for WordPress allows attackers to become adm…

Fix: 2.0.40+
Fix from $1,950 2019-04-03
Ultimate Member MEDIUM 6.1
CVE-2018-17866

Multiple cross-site scripting (XSS) vulnerabilities in includes/core/um-actions-login.php in the "Ultimate Member - User Profile & Membership" plugin…

Fix: 2.0.28+
Fix from $1,600 2018-10-09
Ultimate Member MEDIUM 6.1
CVE-2018-13136

The Ultimate Member (aka ultimatemember) plugin before 2.0.18 for WordPress has XSS via the wp-admin settings screen.

Fix: 2.0.18+
Fix from $1,600 2018-07-04
User Profile \& Membership HIGH 7.5
CVE-2018-0588

Directory traversal vulnerability in the AJAX function of Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote attackers to read…

Fix: 2.0.4+
Fix from $1,950 2018-05-14
Ultimate Member MEDIUM 5.4
CVE-2018-0585

Cross-site scripting vulnerability in Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote attackers to inject arbitrary web scr…

Fix: 2.0.4+
Fix from $1,600 2018-05-14
User Profile \& Membership HIGH 8.8
CVE-2018-10233

The User Profile & Membership plugin before 2.0.7 for WordPress has no mitigations implemented against cross site request forgery attacks. This is a …

Fix: 2.0.7+
Fix from $1,950 2018-04-23
Ultimatemember MEDIUM 6.1
CVE-2018-6943

core/lib/upload/um-image-upload.php in the UltimateMember plugin 2.0 for WordPress has a cross-site scripting vulnerability because it fails to prope…

No fix yet
Fix from $1,600 2018-02-16
Ultimate Member MEDIUM 6.1
CVE-2018-6944

core/lib/upload/um-file-upload.php in the UltimateMember plugin 2.0 for WordPress has a cross-site scripting vulnerability because it fails to proper…

No fix yet
Fix from $1,600 2018-02-16
Ultimate Member MEDIUM 6.1
CVE-2015-8354

Cross-site scripting (XSS) vulnerability in the Ultimate Member WordPress plugin before 1.3.29 for WordPress allows remote attackers to inject arbitr…

Fix: after 1.3.28
Fix from $1,600 2017-09-11