CVE-2026-8489

creationtimestamp| type| source ---|---|--- 2026-07-03 06:00:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mppumip7bu2a 2026-07-03 14:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpqqch5bk727 2026-07-03 20:50:41+00:00| seen|...

CVE-2026-8489

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'aboutme' parameter in all versions up to, and including, 2.11.4 due to insufficient input sanitization and...