CVE-2020-36170

2021-01-0614:15:13

Google

osv.dev

7.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

36.1%

JSON

The Ultimate Member plugin before 2.1.13 for WordPress mishandles hidden name=“timestamp” fields in forms.

CPENameOperatorVersion
ultimatemembereq2.1.2
ultimatemembereq2.1.0-rc.2
ultimatemembereq2.0.56
ultimatemembereq1.3.37
ultimatemembereq1.3.81
ultimatemembereq2.0.37
ultimatemembereq2.0.31
ultimatemembereq1.3.52
ultimatemembereq1.3.75
ultimatemembereq1.3.44

Name	Operator	Version
ultimatemember	eq	2.1.2
ultimatemember	eq	2.1.0-rc.2
ultimatemember	eq	2.0.56
ultimatemember	eq	1.3.37
ultimatemember	eq	1.3.81
ultimatemember	eq	2.0.37
ultimatemember	eq	2.0.31
ultimatemember	eq	1.3.52
ultimatemember	eq	1.3.75
ultimatemember	eq	1.3.44