CVE-2022-3384: Improper Control of Generation of Code

The Ultimate Member plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 2.5.0 via the populatedropdownoptions function that accepts user supplied input and passes it through calluserfunc. This is restricted to non-parameter PHP functions like phpinfo; sin...

CVE-2022-3361: Improper Limitation of a Pathname to a Restricted Directory

The Ultimate Member plugin for WordPress is vulnerable to directory traversal in versions up to, and including 2.5.0 due to insufficient input validation on the 'template' attribute used in shortcodes. This makes it possible for attackers with administrative privileges to supply arbitrary paths...

WordPress plugin Ultimate Member has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A remote code execution...

WordPress plugin Ultimate Member: Path traversal vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A directory traversal...

CVE-2022-42459

Auth. WordPress Options Change vulnerability in Image Hover Effects Ultimate plugin = 9.7.1 on WordPress...

Code injection

Auth. WordPress Options Change vulnerability in Image Hover Effects Ultimate plugin = 9.7.1 on WordPress...

CVE-2022-42459

CVE-2022-42459 affects the WordPress Image Hover Effects Ultimate plugin (versions

WordPress plugin Image Hover Effects Ultimate has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2022-42459: Improper Privilege Management

Auth. WordPress Options Change vulnerability in Image Hover Effects Ultimate plugin = 9.7.1 on WordPress...

CVE-2022-36357

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Webpsilon ULTIMATE TABLES plugin = 1.6.5 versions...

CVE-2022-36357

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Webpsilon ULTIMATE TABLES plugin = 1.6.5 versions...

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Webpsilon ULTIMATE TABLES plugin = 1.6.5 versions...

CVE-2022-36357 WordPress ULTIMATE TABLES plugin <= 1.6.5 - Unauth. Reflected Cross-Site Scripting (XSS) vulnerability

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Webpsilon ULTIMATE TABLES plugin = 1.6.5 versions...

CVE-2022-36357 WordPress ULTIMATE TABLES plugin <= 1.6.5 - Unauth. Reflected Cross-Site Scripting (XSS) vulnerability

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Webpsilon ULTIMATE TABLES plugin = 1.6.5 versions...

CVE-2022-36357

CVE-2022-36357 : An unauthenticated, reflected Cross-Site Scripting (XSS) vulnerability exists in the Webpsilon ULTIMATE TABLES WordPress plugin up to version 1.6.5. The issue stems from inadequate sanitization/escaping of parameters before output, enabling reflected XSS. Affected software: WordP...

WordPress ULTIMATE TABLES plugin <= 1.6.5 - Unauth. Reflected Cross-Site Scripting (XSS) vulnerability

Unauth. Reflected Cross-Site Scripting XSS vulnerability discovered by Tien Nguyen Anh Patchstack Alliance in WordPress ULTIMATE TABLES plugin versions = 1.6.5. Solution No patched version is available. No reply from the vendor...

PT-2022-23327 · WordPress · Ultimate Tables

Name of the Vulnerable Software and Affected Versions: ULTIMATE TABLES plugin versions = 1.6.5 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This vulnerability affects the ULTIMATE TABLES plugin on WordPress, allowing for reflected cross-site...

CVE-2022-36357: Improper Neutralization of Input During Web Page Generation

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Webpsilon ULTIMATE TABLES plugin = 1.6.5 versions...

Ultimate Tables <= 1.6.5 - Reflected Cross-Site Scripting

The plugin does not sanitise and escape some parameters before outputting them back in the page, leading to Reflected Cross-Site Scripting...

WordPress plugin ULTIMATE TABLES has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress...