5215 matches found
WordPress Ultimate Member plugin cross-site scripting vulnerability (CNVD-2019-27692)
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Ultimate Member plugin is one of the plugins used to create member sites or online communities. A cross-site scripting vulnerability...
WordPress Ultimate Member plugin <= 2.0.53 - Cross-Site Scripting (XSS) vulnerability
Cross-Site Scripting XSS vulnerability found in WordPress Ultimate Member plugin versions = 2.0.53. Solution Update the WordPress Ultimate Member plugin to the latest available version at least 2.0.54...
PT-2019-10404
Name of the Vulnerable Software and Affected Versions wp-ultimate-exporter plugin versions prior to 1.4.2 Description The issue concerns a CSRF problem. Recommendations For versions prior to 1.4.2, update to version 1.4.2 or later to resolve the issue...
PT-2019-13691
Name of the Vulnerable Software and Affected Versions WEB STUDIO Ultimate Loan Manager version 2.0 Description The issue exists due to the presence of a cross-site scripting XSS flaw. This flaw can be exploited by adding a branch under the Branches button and setting the notes parameter with...
CVE-2019-14427: Improper Neutralization of Input During Web Page Generation
XSS exists in WEB STUDIO Ultimate Loan Manager 2.0 by adding a branch under the Branches button that sets the notes parameter with crafted JavaScript code...
WordPress Ultimate Member plugin cross-site scripting vulnerability (CNVD-2019-27697)
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Ultimate Member plugin is one of the plugins used to create member sites or online communities. A cross-site scripting vulnerability...
WordPress Ultimate Member plugin cross-site scripting vulnerability (CNVD-2019-27689)
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Ultimate Member plugin is one of the plugins used to create member sites or online communities. A cross-site scripting vulnerability...
CVE-2018-20967: Cross-Site Request Forgery (CSRF)
The wp-ultimate-csv-importer plugin before 5.6.1 for WordPress has CSRF...
CVE-2018-20968: Cross-Site Request Forgery (CSRF)
The wp-ultimate-exporter plugin before 1.4.2 for WordPress has CSRF...
WordPress wp-ultimate-csv-importer plugin cross-site scripting vulnerability
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports PHP and MySQL servers to set up a personal blog site. wp-ultimate-csv-importer plugin is used in which a CSV file import/export plugin. A cross-site scripting vulnerability...
WordPress Ultimate Member plugin cross-site scripting vulnerability (CNVD-2019-27693)
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Ultimate Member plugin is one of the plugins used to create member sites or online communities. A cross-site scripting vulnerability...
WordPress Ultimate Member plugin cross-site scripting vulnerability (CNVD-2019-27688)
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Ultimate Member plugin is one of the plugins used to create member sites or online communities. A cross-site scripting vulnerability...
Ultimate Member Cross-Site Scripting Vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Ultimate Member plugin is one of the plugins used to create member sites or online communities. A cross-site scripting vulnerability...
CVE-2019-14947
The ultimate-member plugin before 2.0.52 for WordPress has XSS during an account upgrade...
CVE-2019-14945
The ultimate-member plugin before 2.0.54 for WordPress has XSS...
CVE-2019-14946
The ultimate-member plugin before 2.0.52 for WordPress has XSS related to UM Roles create and edit operations...
CVE-2019-14945
The ultimate-member plugin before 2.0.54 for WordPress has XSS...
CVE-2019-14946
The ultimate-member plugin before 2.0.52 for WordPress has XSS related to UM Roles create and edit operations...