4672 matches found
CVE-2018-20965
CVE-2018-20965 affects the WordPress plugin Ultimate Member (versions prior to 2.0.4). The connected documents confirm a Cross-Site Scripting (XSS) vulnerability in that plugin, caused by inadequate validation of client-side data. Impact stated across sources is XSS with no explicit exploitation ...
CVE-2016-10872
The ultimate-member plugin before 1.3.40 for WordPress has XSS on the login form...
CVE-2016-10872
CVE-2016-10872 pertains to the WordPress plugin Ultimate Member (prior to version 1.3.40). The vulnerability is a cross-site scripting (XSS) flaw found on the login form, arising in the affected plugin’s handling of user-supplied data. Connected sources consistently describe the same issue and in...
CVE-2015-9304
The ultimate-member plugin before 1.3.18 for WordPress has XSS via text input...
CVE-2015-9304
The CVE-2015-9304 affects the WordPress plugin Ultimate Member prior to version 1.3.18. It is described as a cross-site scripting (XSS) vulnerability that is triggered via text input, allowing an attacker to inject client-side script. The root cause is improper handling/validation of user-supplie...
CVE-2015-9304
The ultimate-member plugin before 1.3.18 for WordPress has XSS via text input...
PT-2019-10401 · WordPress · Ultimate Member
Name of the Vulnerable Software and Affected Versions: Ultimate-member plugin versions prior to 2.0.4 Description: The issue is related to a Cross-Site Scripting XSS problem. Recommendations: For versions prior to 2.0.4, update to version 2.0.4 or later to resolve the issue...
PT-2019-13883
Name of the Vulnerable Software and Affected Versions ultimate-member plugin versions prior to 2.0.52 Description The issue is related to cross-site scripting XSS and is associated with the create and edit operations of UM Roles. Recommendations For versions prior to 2.0.52, update to version...
PT-2019-13882
Name of the Vulnerable Software and Affected Versions Ultimate-member plugin versions prior to 2.0.54 Description The issue is related to a Cross-Site Scripting XSS problem. Recommendations For versions prior to 2.0.54, update to version 2.0.54 or later to resolve the issue...
CVE-2019-14947: Improper Neutralization of Input During Web Page Generation
The ultimate-member plugin before 2.0.52 for WordPress has XSS during an account upgrade...
PT-2019-7263 · WordPress · Ultimate Member
Name of the Vulnerable Software and Affected Versions: ultimate-member plugin versions prior to 1.3.18 Description: The issue is related to a Cross-Site Scripting XSS vulnerability, which occurs when an application includes user input in its output without proper validation or sanitization,...
PT-2019-7668 · WordPress · Ultimate Member
Name of the Vulnerable Software and Affected Versions: Ultimate-member plugin versions prior to 1.3.40 Description: The issue concerns a Cross-Site Scripting XSS flaw located on the login form. Recommendations: For versions prior to 1.3.40, update to version 1.3.40 or later to resolve the issue...
CVE-2019-14946: Improper Neutralization of Input During Web Page Generation
The ultimate-member plugin before 2.0.52 for WordPress has XSS related to UM Roles create and edit operations...
CVE-2015-9304: Improper Neutralization of Input During Web Page Generation
The ultimate-member plugin before 1.3.18 for WordPress has XSS via text input...
CVE-2018-20965: Improper Neutralization of Input During Web Page Generation
The ultimate-member plugin before 2.0.4 for WordPress has XSS...
CVE-2016-10872: Improper Neutralization of Input During Web Page Generation
The ultimate-member plugin before 1.3.40 for WordPress has XSS on the login form...
PT-2019-13884
Name of the Vulnerable Software and Affected Versions Ultimate-member plugin versions prior to 2.0.52 Description The issue concerns a problem with the Ultimate-member plugin for WordPress, where there is XSS during an account upgrade. Recommendations For versions prior to 2.0.52, update to versi...
CVE-2019-14945: Improper Neutralization of Input During Web Page Generation
The ultimate-member plugin before 2.0.54 for WordPress has XSS...
WordPress Ultimate Member Plugin < 2.0.40 CSRF Vulnerability
The WordPress plugin Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...
