CVE-2018-13136

2018-07-0408:29:00

Google

osv.dev

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.2%

JSON

The Ultimate Member (aka ultimatemember) plugin before 2.0.18 for WordPress has XSS via the wp-admin settings screen.

CPENameOperatorVersion
ultimatemembereq1.3.88.4
ultimatemembereq1.3.44
ultimatemembereq1.3.39
ultimatemembereq1.3.59
ultimatemembereq2.0.11
ultimatemembereq1.3.42
ultimatemembereq1.3.88.1
ultimatemembereqpre-v1.3.69.16
ultimatemembereq2.0.16
ultimatemembereqpre-v1.3.69.23

Name	Operator	Version
ultimatemember	eq	1.3.88.4
ultimatemember	eq	1.3.44
ultimatemember	eq	1.3.39
ultimatemember	eq	1.3.59
ultimatemember	eq	2.0.11
ultimatemember	eq	1.3.42
ultimatemember	eq	1.3.88.1
ultimatemember	eq	pre-v1.3.69.16
ultimatemember	eq	2.0.16
ultimatemember	eq	pre-v1.3.69.23