4672 matches found
CVE-2019-14945
The ultimate-member plugin before 2.0.54 for WordPress has XSS...
CVE-2019-14946
The ultimate-member plugin before 2.0.52 for WordPress has XSS related to UM Roles create and edit operations...
CVE-2019-14945
The ultimate-member plugin before 2.0.54 for WordPress has XSS...
CVE-2019-14946
The ultimate-member plugin before 2.0.52 for WordPress has XSS related to UM Roles create and edit operations...
CVE-2019-14947
The ultimate-member plugin before 2.0.52 for WordPress has XSS during an account upgrade...
CVE-2018-20965
The ultimate-member plugin before 2.0.4 for WordPress has XSS...
CVE-2018-20965
The ultimate-member plugin before 2.0.4 for WordPress has XSS...
CVE-2016-10872
The ultimate-member plugin before 1.3.40 for WordPress has XSS on the login form...
CVE-2015-9304
The ultimate-member plugin before 1.3.18 for WordPress has XSS via text input...
CVE-2016-10872
The ultimate-member plugin before 1.3.40 for WordPress has XSS on the login form...
Cross site scripting
The ultimate-member plugin before 2.0.4 for WordPress has XSS...
Design/Logic Flaw
The ultimate-member plugin before 1.3.40 for WordPress has XSS on the login form...
Cross site scripting
The ultimate-member plugin before 2.0.54 for WordPress has XSS...
Design/Logic Flaw
The ultimate-member plugin before 2.0.52 for WordPress has XSS during an account upgrade...
Input validation
The ultimate-member plugin before 1.3.18 for WordPress has XSS via text input...
CVE-2019-14945
The ultimate-member plugin before 2.0.54 for WordPress has XSS...
CVE-2019-14946
CVE-2019-14946 affects the WordPress plugin Ultimate Member (before 2.0.52). It is an XSS vulnerability in UM Roles create/edit operations. Related sources also describe a CSRF alongside stored XSS; a fix was released in v2.0.52 to address these issues.
CVE-2019-14946
The ultimate-member plugin before 2.0.52 for WordPress has XSS related to UM Roles create and edit operations...
CVE-2019-14947
The CVE-2019-14947 entry concerns the WordPress plugin Ultimate Member (pre-2.0.52). The vulnerability is an XSS weakness triggered during an account upgrade, affecting the plugin’s handling of user input. Public references in the connected documents confirm the affected software and the nature o...