Browse CVEs

CRITICAL 9.8 CVE-2022-0769EPSS 9% The Users Ultra WordPress plugin through 3.1.0 fails to properly sanitize and escape the data_target parameter before it is being interpolated in an … Users Ultra after 3.1.0 Fix from $2,3002022-04-25 HIGH 8.8 CVE-2015-9402 The users-ultra plugin before 1.5.59 for WordPress has uultra-form-cvs-form-conf arbitrary file upload. Users Ultra Membership 1.5.59+ Fix from $1,9502019-09-20 HIGH 8.8 CVE-2015-9394 The users-ultra plugin before 1.5.63 for WordPress has CSRF via action=package_add_new to wp-admin/admin-ajax.php. Users Ultra Membership 1.5.63+ Fix from $1,9502019-09-20 HIGH 8.8 CVE-2015-9395 The users-ultra plugin before 1.5.64 for WordPress has SQL Injection via an ajax action. Users Ultra Membership 1.5.64+ Fix from $1,9502019-09-20 MEDIUM 5.4 CVE-2015-9392 The users-ultra plugin before 1.5.63 for WordPress has XSS via the p_name parameter. Users Ultra Membership 1.5.63+ Fix from $1,6002019-09-20 MEDIUM 5.4 CVE-2015-9393 The users-ultra plugin before 1.5.63 for WordPress has XSS via the p_desc parameter. Users Ultra Membership 1.5.63+ Fix from $1,6002019-09-20 HIGH 7.5 CVE-2015-4109 Multiple SQL injection vulnerabilities in the ratings module in the Users Ultra plugin before 1.5.16 for WordPress allow remote attackers to execute … Usersultra after 1.5.15 Fix from $1,9502015-06-09