5218 matches found
CVE-2019-14946
The ultimate-member plugin before 2.0.52 for WordPress has XSS related to UM Roles create and edit operations...
CVE-2018-20965
The ultimate-member plugin before 2.0.4 for WordPress has XSS...
CVE-2018-20965
The ultimate-member plugin before 2.0.4 for WordPress has XSS...
CVE-2016-10872
The ultimate-member plugin before 1.3.40 for WordPress has XSS on the login form...
CVE-2016-10872
The ultimate-member plugin before 1.3.40 for WordPress has XSS on the login form...
CVE-2015-9304
The ultimate-member plugin before 1.3.18 for WordPress has XSS via text input...
Cross site scripting
The ultimate-member plugin before 2.0.4 for WordPress has XSS...
Design/Logic Flaw
The ultimate-member plugin before 2.0.52 for WordPress has XSS during an account upgrade...
Design/Logic Flaw
The ultimate-member plugin before 1.3.40 for WordPress has XSS on the login form...
Cross site scripting
The ultimate-member plugin before 2.0.54 for WordPress has XSS...
Input validation
The ultimate-member plugin before 1.3.18 for WordPress has XSS via text input...
CVE-2019-14945
The ultimate-member plugin before 2.0.54 for WordPress has XSS...
CVE-2019-14946
CVE-2019-14946 affects the WordPress plugin Ultimate Member (before 2.0.52). It is an XSS vulnerability in UM Roles create/edit operations. Related sources also describe a CSRF alongside stored XSS; a fix was released in v2.0.52 to address these issues.
CVE-2019-14946
The ultimate-member plugin before 2.0.52 for WordPress has XSS related to UM Roles create and edit operations...
CVE-2019-14947
The CVE-2019-14947 entry concerns the WordPress plugin Ultimate Member (pre-2.0.52). The vulnerability is an XSS weakness triggered during an account upgrade, affecting the plugin’s handling of user input. Public references in the connected documents confirm the affected software and the nature o...
CVE-2018-20965
CVE-2018-20965 affects the WordPress plugin Ultimate Member (versions prior to 2.0.4). The connected documents confirm a Cross-Site Scripting (XSS) vulnerability in that plugin, caused by inadequate validation of client-side data. Impact stated across sources is XSS with no explicit exploitation ...
CVE-2018-20965
The ultimate-member plugin before 2.0.4 for WordPress has XSS...
CVE-2016-10872
The ultimate-member plugin before 1.3.40 for WordPress has XSS on the login form...
CVE-2016-10872
CVE-2016-10872 pertains to the WordPress plugin Ultimate Member (prior to version 1.3.40). The vulnerability is a cross-site scripting (XSS) flaw found on the login form, arising in the affected plugin’s handling of user-supplied data. Connected sources consistently describe the same issue and in...
