Input validation

The ultimate-member plugin before 1.3.18 for WordPress has XSS via text input...

Design/Logic Flaw

The ultimate-member plugin before 1.3.40 for WordPress has XSS on the login form...

Cross site scripting

The ultimate-member plugin before 2.0.4 for WordPress has XSS...

Design/Logic Flaw

The ultimate-member plugin before 2.0.52 for WordPress has XSS during an account upgrade...

Cross site scripting

The ultimate-member plugin before 2.0.54 for WordPress has XSS...

CVE-2019-14945

The ultimate-member plugin before 2.0.54 for WordPress has XSS...

CVE-2019-14946

CVE-2019-14946 affects the WordPress plugin Ultimate Member (before 2.0.52). It is an XSS vulnerability in UM Roles create/edit operations. Related sources also describe a CSRF alongside stored XSS; a fix was released in v2.0.52 to address these issues.

CVE-2019-14946

The ultimate-member plugin before 2.0.52 for WordPress has XSS related to UM Roles create and edit operations...

CVE-2019-14947

The CVE-2019-14947 entry concerns the WordPress plugin Ultimate Member (pre-2.0.52). The vulnerability is an XSS weakness triggered during an account upgrade, affecting the plugin’s handling of user input. Public references in the connected documents confirm the affected software and the nature o...

CVE-2018-20965

CVE-2018-20965 affects the WordPress plugin Ultimate Member (versions prior to 2.0.4). The connected documents confirm a Cross-Site Scripting (XSS) vulnerability in that plugin, caused by inadequate validation of client-side data. Impact stated across sources is XSS with no explicit exploitation ...

CVE-2018-20965

The ultimate-member plugin before 2.0.4 for WordPress has XSS...

CVE-2016-10872

The ultimate-member plugin before 1.3.40 for WordPress has XSS on the login form...

CVE-2016-10872

CVE-2016-10872 pertains to the WordPress plugin Ultimate Member (prior to version 1.3.40). The vulnerability is a cross-site scripting (XSS) flaw found on the login form, arising in the affected plugin’s handling of user-supplied data. Connected sources consistently describe the same issue and in...

CVE-2015-9304

The ultimate-member plugin before 1.3.18 for WordPress has XSS via text input...

CVE-2015-9304

The CVE-2015-9304 affects the WordPress plugin Ultimate Member prior to version 1.3.18. It is described as a cross-site scripting (XSS) vulnerability that is triggered via text input, allowing an attacker to inject client-side script. The root cause is improper handling/validation of user-supplie...

CVE-2015-9306

The CVE-2015-9306 entry concerns the WordPress plugin wp-ultimate-csv-importer; versions prior to 3.8.1 are affected by a Cross-Site Scripting (XSS) vulnerability. The issue arises from inadequate validation of client-side data. Impact is XSS execution within the context of the user’s browser; ex...

PT-2019-7263 · WordPress · Ultimate Member

Name of the Vulnerable Software and Affected Versions: ultimate-member plugin versions prior to 1.3.18 Description: The issue is related to a Cross-Site Scripting XSS vulnerability, which occurs when an application includes user input in its output without proper validation or sanitization,...

PT-2019-7668 · WordPress · Ultimate Member

Name of the Vulnerable Software and Affected Versions: Ultimate-member plugin versions prior to 1.3.40 Description: The issue concerns a Cross-Site Scripting XSS flaw located on the login form. Recommendations: For versions prior to 1.3.40, update to version 1.3.40 or later to resolve the issue...

PT-2019-10401 · WordPress · Ultimate Member

Name of the Vulnerable Software and Affected Versions: Ultimate-member plugin versions prior to 2.0.4 Description: The issue is related to a Cross-Site Scripting XSS problem. Recommendations: For versions prior to 2.0.4, update to version 2.0.4 or later to resolve the issue...

PT-2019-7265 · WordPress · Wp Ultimate Csv Importer

Name of the Vulnerable Software and Affected Versions: wp-ultimate-csv-importer plugin version prior to 3.8.1 for WordPress Description: The issue is related to a Cross-Site Scripting XSS problem. XSS is a type of security vulnerability that allows an attacker to inject malicious scripts into a...