dbcve.org
Vulnerability index

Browse CVEs

7 matching
Cards Compact
Filters 1 Clear all
Severity

Filters apply as you choose them.

Top technology Linux 13140 Google 12536 Microsoft 12379 Oracle 6843 Apple 6692 Adobe 6387 Ibm 6336 Cisco 5759 Debian 3919 Mozilla 2895 Apache 2864 Redhat 2592
Users Ultra CRITICAL 9.8
CVE-2022-0769EPSS 9%

The Users Ultra WordPress plugin through 3.1.0 fails to properly sanitize and escape the data_target parameter before it is being interpolated in an …

Fix: after 3.1.0
Fix from $2,300 2022-04-25
Users Ultra Membership HIGH 8.8
CVE-2015-9402

The users-ultra plugin before 1.5.59 for WordPress has uultra-form-cvs-form-conf arbitrary file upload.

Fix: 1.5.59+
Fix from $1,950 2019-09-20
Users Ultra Membership HIGH 8.8
CVE-2015-9394

The users-ultra plugin before 1.5.63 for WordPress has CSRF via action=package_add_new to wp-admin/admin-ajax.php.

Fix: 1.5.63+
Fix from $1,950 2019-09-20
Users Ultra Membership HIGH 8.8
CVE-2015-9395

The users-ultra plugin before 1.5.64 for WordPress has SQL Injection via an ajax action.

Fix: 1.5.64+
Fix from $1,950 2019-09-20
Users Ultra Membership MEDIUM 5.4
CVE-2015-9392

The users-ultra plugin before 1.5.63 for WordPress has XSS via the p_name parameter.

Fix: 1.5.63+
Fix from $1,600 2019-09-20
Users Ultra Membership MEDIUM 5.4
CVE-2015-9393

The users-ultra plugin before 1.5.63 for WordPress has XSS via the p_desc parameter.

Fix: 1.5.63+
Fix from $1,600 2019-09-20
Usersultra HIGH 7.5
CVE-2015-4109

Multiple SQL injection vulnerabilities in the ratings module in the Users Ultra plugin before 1.5.16 for WordPress allow remote attackers to execute …

Fix: after 1.5.15
Fix from $1,950 2015-06-09