Browse CVEs

MEDIUM 6.1 CVE-2018-20965 The ultimate-member plugin before 2.0.4 for WordPress has XSS. Ultimate Member 2.0.4+ Fix from $1,6002019-08-12 MEDIUM 6.1 CVE-2015-9304 The ultimate-member plugin before 1.3.18 for WordPress has XSS via text input. Ultimate Member 1.3.18+ Fix from $1,6002019-08-12 MEDIUM 6.1 CVE-2016-10872 The ultimate-member plugin before 1.3.40 for WordPress has XSS on the login form. Ultimate Member 1.3.40+ Fix from $1,6002019-08-12 HIGH 8.8 CVE-2019-10270 An arbitrary password reset issue was discovered in the Ultimate Member plugin 2.39 for WordPress. It is possible (due to lack of verification and co… Ultimate Member 2.0.40+ Fix from $1,9502019-06-21 HIGH 8.8 CVE-2019-10673 A CSRF vulnerability in a logged-in user's profile edit form in the Ultimate Member plugin before 2.0.40 for WordPress allows attackers to become adm… Ultimate Member 2.0.40+ Fix from $1,9502019-04-03 MEDIUM 6.1 CVE-2018-17866 Multiple cross-site scripting (XSS) vulnerabilities in includes/core/um-actions-login.php in the "Ultimate Member - User Profile & Membership" plugin… Ultimate Member 2.0.28+ Fix from $1,6002018-10-09 MEDIUM 6.1 CVE-2018-13136 The Ultimate Member (aka ultimatemember) plugin before 2.0.18 for WordPress has XSS via the wp-admin settings screen. Ultimate Member 2.0.18+ Fix from $1,6002018-07-04 HIGH 7.5 CVE-2018-0588 Directory traversal vulnerability in the AJAX function of Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote attackers to read… User Profile \& Membership 2.0.4+ Fix from $1,9502018-05-14 MEDIUM 5.4 CVE-2018-0585 Cross-site scripting vulnerability in Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote attackers to inject arbitrary web scr… Ultimate Member 2.0.4+ Fix from $1,6002018-05-14 HIGH 8.8 CVE-2018-10233 The User Profile & Membership plugin before 2.0.7 for WordPress has no mitigations implemented against cross site request forgery attacks. This is a … User Profile \& Membership 2.0.7+ Fix from $1,9502018-04-23 MEDIUM 6.1 CVE-2018-6943 core/lib/upload/um-image-upload.php in the UltimateMember plugin 2.0 for WordPress has a cross-site scripting vulnerability because it fails to prope… Ultimatemember No fix yet Fix from $1,6002018-02-16 MEDIUM 6.1 CVE-2018-6944 core/lib/upload/um-file-upload.php in the UltimateMember plugin 2.0 for WordPress has a cross-site scripting vulnerability because it fails to proper… Ultimate Member No fix yet Fix from $1,6002018-02-16 MEDIUM 6.1 CVE-2015-8354 Cross-site scripting (XSS) vulnerability in the Ultimate Member WordPress plugin before 1.3.29 for WordPress allows remote attackers to inject arbitr… Ultimate Member after 1.3.28 Fix from $1,6002017-09-11